# 4.8.40

Created: 2022-05-16 12:31:13 +0000 UTC

Image Digest: `sha256:4ebcb3aea63d4acbb92118d3ae7ed08d3ebb1a66e7f79fddbb4da74883a12d0a`

Promoted from registry.ci.openshift.org/ocp/release:4.8.0-0.nightly-2022-05-13-191750


## Changes from 4.8.5

### Components

* Kubernetes upgraded from 1.21.1 to 1.21.11
* Red Hat Enterprise Linux CoreOS upgraded from 48.84.202108062347-0 to 48.84.202205131125-0


### Rebuilt images without code change

* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [8c036e44](https://github.com/openshift/aws-ebs-csi-driver/commit/8c036e44147d9e4546c726b934dedda3940790af) `sha256:6f4d6b5de290b9f4e0e1238a2b2e5de2d3982a04107cf8a2d6a2fe084d7a919f`
* [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator) git [d1fe616c](https://github.com/openshift/aws-ebs-csi-driver-operator/commit/d1fe616c0da0edddb7019a64b0ad1136b36a5f26) `sha256:6744ff3163099ff542c87867641e6616c18aa72e794560f925228cde52243c78`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [2d461b39](https://github.com/openshift/azure-disk-csi-driver/commit/2d461b39bacc76f0b879f943015df4d2191f72f4) `sha256:ab9cd93046293c4de1458c36e5dc5838300264d3616330a6eb9afdf5eab71f2d`
* [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator) git [d3a3c298](https://github.com/openshift/azure-disk-csi-driver-operator/commit/d3a3c298c91371ccd37896857f623f4494dd78a6) `sha256:0a96dbc66a27d565700743763e555a6af2639c819cd4c14f4e8e9bf8e2459164`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [a60d493e](https://github.com/openshift/cluster-api-provider-baremetal/commit/a60d493e45aa9d3c0391297fd77cb168092fed35) `sha256:3808e8227934f5f34f0c8932ce83cfdb2640ae6a6c97d4ea9277e5ed32e3c71a`
* [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler) git [7bbde4cc](https://github.com/openshift/kubernetes-autoscaler/commit/7bbde4cc4ddb1d0030f23b789b4bbf48ab3ef79d) `sha256:3e65f0482820a053c4803a5ea7f9bd6dc543d6278293cff875465f4bca05b799`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [1af395b7](https://github.com/openshift/cluster-bootstrap/commit/1af395b7881d951a824858f5d393357609bddbf0) `sha256:2d1c0ccb289f639a66fabc7becf158c49597de2b0ef07b81c3e47a7d959b2f57`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [c1022410](https://github.com/openshift/cluster-config-operator/commit/c1022410bf9a000e84d9764f8e8a5cfa35cfa452) `sha256:58a4ce734fdecbbe28a2aa15df2849758ceae0906dae5aafc5094ec3fee573fa`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [07b3f810](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/07b3f81036401073d68eb1ef152b96ab5e5a2fc6) `sha256:2910a2d77bcda6ef45bc13d4e72f6b650cea04b3fb7acffaa5e6598a758c1714`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [fdb2ebec](https://github.com/openshift/cluster-dns-operator/commit/fdb2ebecdeb992444964f84fd0b5c17f37d80536) `sha256:ef1e6376384a4cb257ce8e5407f276bd2b07f5de1923273c0bcd43ecff72c8e5`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [286c1577](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/286c157755c8120ce969c7c15f969737b46b1a0a) `sha256:d505548472c44622c6acd2876d842d1d40d89a21ca6a31410148088a4f93f174`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [ec46ea5c](https://github.com/openshift/cluster-policy-controller/commit/ec46ea5ce3735fcb3d10290834f9ae5fb31148f0) `sha256:643126090ccaa71e4d6f97a73da73656ab8165ff295de10f703986d7b3662e30`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [31fb491f](https://github.com/openshift/cluster-samples-operator/commit/31fb491fc14faed6ebbe41a526764947069ff0a2) `sha256:ced0f8d6571e139626d5e16a1f1b09e2403496edae4e89a1d97666ac851dc793`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [87835b73](https://github.com/openshift/cluster-update-keys/commit/87835b737f0a90a6259150746114f251241bf52e) `sha256:950d311843cb5b2e0dc9ec4b359ba28f74c4637f6d247eeebc11074d6e3099cc`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [71a8b346](https://github.com/openshift/containernetworking-plugins/commit/71a8b3469df865daf68cb893bfe313328d4be992) `sha256:d77974c214bbecd3d0481143d27d2840932efbc5f5cec83ca3a9bf7ed6c1306f`
* [coredns](https://github.com/openshift/coredns) git [642b46ef](https://github.com/openshift/coredns/commit/642b46ef468d132d26c3f84a8bcb4b542d8df1e6) `sha256:c6060f9e35e1f2044c79385cdbd05d0e5ba14c8fff153969e0ff42903dabf733`
* [csi-driver-manila](https://github.com/openshift/cloud-provider-openstack) git [3579eadc](https://github.com/openshift/cloud-provider-openstack/commit/3579eadc9b0e195a4bb80d9a43a33a250c4a8dd6) `sha256:04efb85b05beef698c1e70033aeda0d235e9b90c2b764a37c78e77b857d5d8f9`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [596da63e](https://github.com/openshift/csi-external-attacher/commit/596da63ecf2886a9bce19c08ad1120e123b498af) `sha256:5fcfe71b28157bf790cc586692691fea8567b3623d42ea74275fa83dcf3f6fce`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [3ea7e68a](https://github.com/openshift/csi-external-provisioner/commit/3ea7e68a518870d63c7da9485f8a69fa1555b452) `sha256:29d57eea7a68490508ea02dc0dda4882bcb8e44fd6fe6493adab2545bb569afb`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [b5dd2b39](https://github.com/openshift/csi-external-resizer/commit/b5dd2b39e9dfb83addd0c07654c3b9119e24cb36) `sha256:0046380da55056cd187183f1528a04196057a61420171deaf1686cdb1d1197e2`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [1e2cca95](https://github.com/openshift/csi-external-snapshotter/commit/1e2cca95999057e16fcfee07e8068f7a77f2e164) `sha256:b8f6f86dafbc5c78c9ed66c1d21c8ee6c5d5c6d68d37a2bbcecf5c8ffdb5c92f`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [a29b1153](https://github.com/openshift/csi-livenessprobe/commit/a29b1153451d6ffa6fbcb1dacbe25639c2523488) `sha256:d860c77143d6718a6f01e3e883a37fde490c10658b6b2352ed0476850152bebc`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [0519730f](https://github.com/openshift/csi-node-driver-registrar/commit/0519730f75f89c11f1ee07c7f81b0bcae1ddf705) `sha256:e9d1e80bc087755e7acc6d8264ef820bfc4718238cc62232b540f736c63ba55d`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [1e2cca95](https://github.com/openshift/csi-external-snapshotter/commit/1e2cca95999057e16fcfee07e8068f7a77f2e164) `sha256:42214026a4516350cce56cb1d726ddf6469779fd98e45bb5c98ace1ab5d041fc`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [1e2cca95](https://github.com/openshift/csi-external-snapshotter/commit/1e2cca95999057e16fcfee07e8068f7a77f2e164) `sha256:76fda5f9bfa4d4c4c50f27430f248caa61416b819c975af54d97df6893bee7e6`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [016bea1a](https://github.com/openshift/egress-router-cni/commit/016bea1a6f5ec53aab8e936f4120c32a05322027) `sha256:9fe9666c259d7c5cc0ded266e5e113f9a2cbf2ee9e2e9654613b793d3f939a24`
* [gcp-machine-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [34db56eb](https://github.com/openshift/cluster-api-provider-gcp/commit/34db56ebf7a8a46828f5830d42b26f9d2bdd0db1) `sha256:f2e29c69bec301c364602cca9f78316a44243096fbcaa1c93fd0c7a1e210adc4`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [35ebe860](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/35ebe86003c339821d3a36186a66f8ef86049932) `sha256:35db69db5245883f59999fb71288ed9bb43fd9a24eb84127020c041fd04dd79f`
* [grafana](https://github.com/openshift/grafana) git [b987e4b1](https://github.com/openshift/grafana/commit/b987e4b1e20b6cf814bbc408dd2a740aed92e410) `sha256:d5da104aa63c3ea1026af5bdca445691ebe969af2b3b5e03282c121f37c601c6`
* [ironic-ipa-downloader](https://github.com/openshift/ironic-ipa-downloader) git [ba878326](https://github.com/openshift/ironic-ipa-downloader/commit/ba8783261ea8f21afdcd46eb8a86986597c38c75) `sha256:bee130aa8ed647186f156d590536529f318811b01b3b00aed307132ee1fa7920`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [d2e40e34](https://github.com/openshift/ironic-static-ip-manager/commit/d2e40e34f8284d0ac7c4e9133b537baeac07b408) `sha256:52120834a0cc30ed04e7685195936cf67f55d433b0f870969084f45e57193933`
* [keepalived-ipfailover](https://github.com/openshift/images) git [ad38e116](https://github.com/openshift/images/commit/ad38e116f3533e0e78621a2887d8b70cde7cba31) `sha256:44bc0973a96aab8dcce972671e5a6221ad37dca06fa77a03d5fa2c980fd201fa`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [813c3da7](https://github.com/openshift/kube-rbac-proxy/commit/813c3da7222a4ccc95ef3827cd54b0ce93a8cbe5) `sha256:8b06143a119b27255a8b7319683ef0efd5e936dd5e18a1cfa547c52e9898c662`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [94716629](https://github.com/openshift/kube-state-metrics/commit/947166293195d115500d4479c0c40c8c01a25ad0) `sha256:bf2755b9e12228ef48f3f6e014a8b60a92916fced542631178f024040758a9b2`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [901a6d22](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/901a6d221d1cf79b4b6ba859bb43521e0ee635b3) `sha256:90cf2b428ca6653d70ed08a49719ab715ca1cc178fdc24aae2d8ab28339354f6`
* machine-os-content `sha256:d1ee927bea0280cbd8d0817bd6cf444aa92361bcbc47e710b3d5c4181d227708`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [64645feb](https://github.com/openshift/multus-admission-controller/commit/64645febe4129a794b1291d0a375a7b2bb7fba39) `sha256:acca89fb0851a9a54c2632ea5d76dc65cb841f3b31fc0cf03d0d79c781e9635b`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [187ad91f](https://github.com/openshift/multus-networkpolicy/commit/187ad91f119ff6b73610922012e7af4e704c5e93) `sha256:7f7778a7c91fc338dd92a2eaaf73ccbe59da39280a1139636fa81b47d16df12d`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [f02c63ae](https://github.com/openshift/network-metrics-daemon/commit/f02c63ae9475d2e51ee1b94b8e341ac8f9d590b7) `sha256:690e27abef13060929cb4bf006ad3b2f041c4e310d24042958866807ca3da077`
* [network-tools](https://github.com/openshift/network-tools) git [5ac3739e](https://github.com/openshift/network-tools/commit/5ac3739e4382eb10cdd9209c8947096997fe38a2) `sha256:7764b75cb2d38b354cd1c51187eda98ab5285a29936a3a008d1cbf722176509d`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [3fc0d89b](https://github.com/openshift/oauth-proxy/commit/3fc0d89b2607808927f5b48168342f5dc3a1a271) `sha256:8285963b07759f0c56c8d1ad0af2db81a23859dffa33b851e7c17438b8f35337`
* [oauth-server](https://github.com/openshift/oauth-server) git [374e2ee3](https://github.com/openshift/oauth-server/commit/374e2ee38a1910c6d56172e9d4ec1828c4dea1be) `sha256:d87958d000bfcd449eab7988111982de009a3e605e410105adea36e13144a160`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [10142914](https://github.com/openshift/openshift-state-metrics/commit/101429149266e2c86a41b82baf47a033c9a93b02) `sha256:89dade9c318003f19538658be86062383a9b8ecb15a9cac6a3f2cf9beae64d4d`
* [openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack) git [3579eadc](https://github.com/openshift/cloud-provider-openstack/commit/3579eadc9b0e195a4bb80d9a43a33a250c4a8dd6) `sha256:f3ebe2ad6e65da0f706b8880efe71a427fa317291857647ab2546c12d0a77cef`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [2faeb405](https://github.com/openshift/prom-label-proxy/commit/2faeb4050010914d6b55da38bffb44b95702e052) `sha256:630ca027da267c0ada641bfce8641a937ef8535c26ec44f4f08b2c4d22b7fd55`
* [prometheus](https://github.com/openshift/prometheus) git [f3beb880](https://github.com/openshift/prometheus/commit/f3beb880dbde817bf5ed2befc1880445884e4be0) `sha256:fde844ef94d8d73e25a834813e0fd6d2d0ed6a36f4186fc368ed18a771155283`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [7b5ac874](https://github.com/openshift/prometheus-alertmanager/commit/7b5ac8741d87542c43d002aef3b881d7f8065133) `sha256:9d6344791c7279e0e24868a81500a2cc11c90b6fd2cd3c6cf58b40d05d282efb`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [9ad2cf90](https://github.com/openshift/node_exporter/commit/9ad2cf906b9c0c44110401f121dc5cf7d657acca) `sha256:7fbb57ee9e8ab648bb2f06a37217049fb653ae27e24fa4a2271fe21cd8b6a080`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [dd5345eb](https://github.com/openshift/vmware-vsphere-csi-driver/commit/dd5345eb7ed3c68eff6619ca434b5e83083f5bc9) `sha256:6634e6d252f3a1468230496cddccb072d880d578b648d3e4194ea6ee3b4ee3cd`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [dd5345eb](https://github.com/openshift/vmware-vsphere-csi-driver/commit/dd5345eb7ed3c68eff6619ca434b5e83083f5bc9) `sha256:5523531fe4859fafc324c0f906efeaad3fe6922f435688dacf661cfe810ccc73`


### [aws-machine-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/4b38982f44a3446a5443076fe20c11d136f7b629)

* [Bug 2066675](https://bugzilla.redhat.com/show_bug.cgi?id=2066675): Ensure IOPS setting is honoured on all supported block device types [#437](https://github.com/openshift/cluster-api-provider-aws/pull/437)
* [Bug 2031905](https://bugzilla.redhat.com/show_bug.cgi?id=2031905): Prevent Machine from being considered provisioned until it exists in AWS [#432](https://github.com/openshift/cluster-api-provider-aws/pull/432)
* [Bug 2016926](https://bugzilla.redhat.com/show_bug.cgi?id=2016926): do not requeue if the machine has been updated [#426](https://github.com/openshift/cluster-api-provider-aws/pull/426)
* [Bug 1974680](https://bugzilla.redhat.com/show_bug.cgi?id=1974680): Fix eventual consistency logic to be consistent [#416](https://github.com/openshift/cluster-api-provider-aws/pull/416)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/4c66f3d38d89e4076051daebe8915ef92b52fe8f...4b38982f44a3446a5443076fe20c11d136f7b629)


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/58ef8af861317beceac26691d5c452af45ca0e4a)

* [Bug 2029253](https://bugzilla.redhat.com/show_bug.cgi?id=2029253): update go.mod for go1.16 [#148](https://github.com/openshift/aws-pod-identity-webhook/pull/148)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/2b8eee2a4f0555c6d4ce7700fda774190574fb5d...58ef8af861317beceac26691d5c452af45ca0e4a)


### [azure-machine-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/ad5852b1255c2ecd3c5e385fee4a5e56b8ed8b22)

* [Bug 2051576](https://bugzilla.redhat.com/show_bug.cgi?id=2051576): Requeue create on invalid credentials errors [#253](https://github.com/openshift/cluster-api-provider-azure/pull/253)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/830107632bf85869e13fbcb0848b27c310002d25...ad5852b1255c2ecd3c5e385fee4a5e56b8ed8b22)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/45c6c1d018280e88e989ec066918f0d93afd3535)

* [Bug 2069166](https://bugzilla.redhat.com/show_bug.cgi?id=2069166): stop considering Mint mode as supported on Azure (#5699) [#5753](https://github.com/openshift/installer/pull/5753)
* [Bug 2022171](https://bugzilla.redhat.com/show_bug.cgi?id=2022171): Relax vcenter hostname check [#5371](https://github.com/openshift/installer/pull/5371)
* Updating ose-installer-artifacts builder & base images to be consistent with ART [#4782](https://github.com/openshift/installer/pull/4782)
* [Bug 2023363](https://bugzilla.redhat.com/show_bug.cgi?id=2023363): Add ingress rules to master SG for compact clusters [#5386](https://github.com/openshift/installer/pull/5386)
* [Bug 2017986](https://bugzilla.redhat.com/show_bug.cgi?id=2017986): Set AWS Bootstrap Type == Master [#5338](https://github.com/openshift/installer/pull/5338)
* [Bug 2017258](https://bugzilla.redhat.com/show_bug.cgi?id=2017258): bump oVirt terraform provider version which fix "Disk is locked" bug [#5329](https://github.com/openshift/installer/pull/5329)
* [Bug 2002349](https://bugzilla.redhat.com/show_bug.cgi?id=2002349): Fix invalid UPI AWS instance type [#5199](https://github.com/openshift/installer/pull/5199)
* [Bug 2008823](https://bugzilla.redhat.com/show_bug.cgi?id=2008823): baremetal: Ensure ipv6 bootstrap VM client-id is predictable [#5250](https://github.com/openshift/installer/pull/5250)
* [Bug 2009019](https://bugzilla.redhat.com/show_bug.cgi?id=2009019): update legacy RHCOS boot image metadata [#5255](https://github.com/openshift/installer/pull/5255)
* [Bug 1982001](https://bugzilla.redhat.com/show_bug.cgi?id=1982001): Bump RHCOS 4.8 boot image [#5227](https://github.com/openshift/installer/pull/5227)
* Update OWNERS [#5242](https://github.com/openshift/installer/pull/5242)
* [Bug 2004236](https://bugzilla.redhat.com/show_bug.cgi?id=2004236): Document how to enable Octavia Day 2 [#5161](https://github.com/openshift/installer/pull/5161)
* [Bug 1973421](https://bugzilla.redhat.com/show_bug.cgi?id=1973421): [4.8] improve dual-stack install-config validation [#5114](https://github.com/openshift/installer/pull/5114)
* [Bug 1987848](https://bugzilla.redhat.com/show_bug.cgi?id=1987848): openstack: quotas/BYON improvements [#5122](https://github.com/openshift/installer/pull/5122)
* [Bug 1969651](https://bugzilla.redhat.com/show_bug.cgi?id=1969651): bump RHCOS 4.8 boot images [#5051](https://github.com/openshift/installer/pull/5051)
* [Full changelog](https://github.com/openshift/installer/compare/54c7628be380fcb568262dd49a4636da2e0baa21...45c6c1d018280e88e989ec066918f0d93afd3535)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/02a2d3cf8747de12f8f845575a11b7dd4519046d)

* [Bug 2000442](https://bugzilla.redhat.com/show_bug.cgi?id=2000442): Add LIVE_ISO_FORCE_PERSISTENT_BOOT_DEVICE variable [#174](https://github.com/openshift/baremetal-operator/pull/174)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/015024fe8c50eca20850fcc550880b7357709613...02a2d3cf8747de12f8f845575a11b7dd4519046d)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/710cb737702d9a13b3cfeead4386bd9a7fa9435a)

* [Bug 2059584](https://bugzilla.redhat.com/show_bug.cgi?id=2059584): Ignore VIPs in node-ip show [#172](https://github.com/openshift/baremetal-runtimecfg/pull/172)
* [Bug 2053720](https://bugzilla.redhat.com/show_bug.cgi?id=2053720): Avoid dynamically allocated port range for haproxy [#171](https://github.com/openshift/baremetal-runtimecfg/pull/171)
* [Bug 2050288](https://bugzilla.redhat.com/show_bug.cgi?id=2050288): Add delay after sending bootstrap stop and start messages [#170](https://github.com/openshift/baremetal-runtimecfg/pull/170)
* [Bug 1996573](https://bugzilla.redhat.com/show_bug.cgi?id=1996573): CoreDNS Corefile hosts - add support for dual-stack [#149](https://github.com/openshift/baremetal-runtimecfg/pull/149)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/c8b1456c0f0aa124490b47281557a1beaa5afcf1...710cb737702d9a13b3cfeead4386bd9a7fa9435a)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/41ff67edf43f0304d1482882f85e0069f175d521)

* [Bug 2066760](https://bugzilla.redhat.com/show_bug.cgi?id=2066760): Add TMOUT env to debug node pod [#1095](https://github.com/openshift/oc/pull/1095)
* [Bug 2039762](https://bugzilla.redhat.com/show_bug.cgi?id=2039762): Remove `git://` from new-app tests [#1023](https://github.com/openshift/oc/pull/1023)
* [Bug 2053223](https://bugzilla.redhat.com/show_bug.cgi?id=2053223): Fix mirroring images that have dots in their namespace [#1069](https://github.com/openshift/oc/pull/1069)
* [Bug 2038931](https://bugzilla.redhat.com/show_bug.cgi?id=2038931): properly handle --dry-run=server [#1017](https://github.com/openshift/oc/pull/1017)
* [Bug 2004193](https://bugzilla.redhat.com/show_bug.cgi?id=2004193): Registry mirror panic [#926](https://github.com/openshift/oc/pull/926)
* Add kevinrizza as catalog-approver [#921](https://github.com/openshift/oc/pull/921)
* [Bug 1992639](https://bugzilla.redhat.com/show_bug.cgi?id=1992639): revert incorrect allowance of ssh:// prefix with scp styled URLs [#898](https://github.com/openshift/oc/pull/898)
* [Full changelog](https://github.com/openshift/oc/compare/c6ad8aceb1ea48853bfb9f635dc36f29af6d61ba...41ff67edf43f0304d1482882f85e0069f175d521)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/c21a2f905948b8879c747da08cd8ed1c7091d43f)

* [Bug 2058270](https://bugzilla.redhat.com/show_bug.cgi?id=2058270): Remove Azure mint mode support as Active Directory Graph API will be sunset [#454](https://github.com/openshift/cloud-credential-operator/pull/454)
* [Bug 2027928](https://bugzilla.redhat.com/show_bug.cgi?id=2027928): pod-identity-webhook starts without tls [#429](https://github.com/openshift/cloud-credential-operator/pull/429)
* [Bug 2027832](https://bugzilla.redhat.com/show_bug.cgi?id=2027832): Stop putting CCO in degraded state when stale credentials are found [#428](https://github.com/openshift/cloud-credential-operator/pull/428)
* [Bug 2026098](https://bugzilla.redhat.com/show_bug.cgi?id=2026098): Check for aws status in infra platform status field before client setup [#425](https://github.com/openshift/cloud-credential-operator/pull/425)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/b8932e9fc555bc5bc356eddb3b48358caba72e92...c21a2f905948b8879c747da08cd8ed1c7091d43f)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/a180c2ab5c9b09746e984f4f6459b4e8cc06de82)

* [Bug 2062591](https://bugzilla.redhat.com/show_bug.cgi?id=2062591): e2e: Pin Keycloack to the legacy variant [#557](https://github.com/openshift/cluster-authentication-operator/pull/557)
* [Bug 1997906](https://bugzilla.redhat.com/show_bug.cgi?id=1997906): csr request: use generate names to prevent getting stuck waiting for a cert [#494](https://github.com/openshift/cluster-authentication-operator/pull/494)
* [Bug 2003632](https://bugzilla.redhat.com/show_bug.cgi?id=2003632): manifests, bindata: explicitely set runAsUser for operator and operand [#484](https://github.com/openshift/cluster-authentication-operator/pull/484)
* [Bug 2003946](https://bugzilla.redhat.com/show_bug.cgi?id=2003946): Deploy PDB to prevent more than one replica going unavailable [#488](https://github.com/openshift/cluster-authentication-operator/pull/488)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/8186ffeef6706ff96c34f5bbc9c1fccb94a769cc...a180c2ab5c9b09746e984f4f6459b4e8cc06de82)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/917d395f0483ba1b0f516283d9247c585039347a)

* Updating ose-cluster-autoscaler-operator builder & base images to be consistent with ART [#193](https://github.com/openshift/cluster-autoscaler-operator/pull/193)
* [Bug 2026237](https://bugzilla.redhat.com/show_bug.cgi?id=2026237): Change ClusterAutoscalerUnschedulablePods severity to info [#232](https://github.com/openshift/cluster-autoscaler-operator/pull/232)
* [Bug 1995595](https://bugzilla.redhat.com/show_bug.cgi?id=1995595): add csidrivers and csistoragecapacities to autoscaler cluster role [#220](https://github.com/openshift/cluster-autoscaler-operator/pull/220)
* [Bug 1991501](https://bugzilla.redhat.com/show_bug.cgi?id=1991501): Do not recreate CA deployment when CA CR is being deleted [#217](https://github.com/openshift/cluster-autoscaler-operator/pull/217)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/fdae5baad94f8b6a5b7a9077d5af8650f35c1e94...917d395f0483ba1b0f516283d9247c585039347a)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/7cf2c50d413d323fe1fa8c2f841c752d903eac81)

* [Bug 2055279](https://bugzilla.redhat.com/show_bug.cgi?id=2055279): Calculating network stack only on supported Platforms [#248](https://github.com/openshift/cluster-baremetal-operator/pull/248)
* [Bug 2000445](https://bugzilla.redhat.com/show_bug.cgi?id=2000445): Set LIVE_ISO_FORCE_PERSISTENT_BOOT_DEVICE=Never [#194](https://github.com/openshift/cluster-baremetal-operator/pull/194)
* [Bug 1975711](https://bugzilla.redhat.com/show_bug.cgi?id=1975711): Only start static ip set if provisioning net not disabled [#166](https://github.com/openshift/cluster-baremetal-operator/pull/166)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/04a2ae214a8f6cea458b26a89b53190cf60fcad6...7cf2c50d413d323fe1fa8c2f841c752d903eac81)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/35672edef2c867e135b0e9378a00764b363d8ba5)

* [Bug 2008414](https://bugzilla.redhat.com/show_bug.cgi?id=2008414): pkg/operator/metriccontroller: read etcd-operator SA token rather than using prometheus [#665](https://github.com/openshift/cluster-etcd-operator/pull/665)
* [Bug 1994483](https://bugzilla.redhat.com/show_bug.cgi?id=1994483): bindata/etcd: remove unix socket from advertised list [#642](https://github.com/openshift/cluster-etcd-operator/pull/642)
* [Bug 1999777](https://bugzilla.redhat.com/show_bug.cgi?id=1999777): [release-4.8]: pkg/operator: add cluster backup upgrade controller [#652](https://github.com/openshift/cluster-etcd-operator/pull/652)
* [Bug 1993800](https://bugzilla.redhat.com/show_bug.cgi?id=1993800): Bump library-go to include backoff fix of installers [#648](https://github.com/openshift/cluster-etcd-operator/pull/648)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/300bdf3949e155295313cb6ecdc58dc7ecf17632...35672edef2c867e135b0e9378a00764b363d8ba5)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/4aa1e6f3e0321df1109672d2d105de5a8b913cb5)

* [Bug 2074053](https://bugzilla.redhat.com/show_bug.cgi?id=2074053): Deployment annotations, runtimeClassName override and fs policy change [#767](https://github.com/openshift/cluster-image-registry-operator/pull/767)
* [Bug 2067107](https://bugzilla.redhat.com/show_bug.cgi?id=2067107): Retry on pruner failures [#761](https://github.com/openshift/cluster-image-registry-operator/pull/761)
* [Bug 2015098](https://bugzilla.redhat.com/show_bug.cgi?id=2015098): Avoid disruptions [#725](https://github.com/openshift/cluster-image-registry-operator/pull/725)
* [Bug 2004028](https://bugzilla.redhat.com/show_bug.cgi?id=2004028): Update rolling update parameters [#717](https://github.com/openshift/cluster-image-registry-operator/pull/717)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/e137fea075b0e2c5a44f34faaf3c46f7ae070d93...4aa1e6f3e0321df1109672d2d105de5a8b913cb5)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/f03d5e4a4ed014035ef97f86c70be30c69243015)

* [Bug 2066302](https://bugzilla.redhat.com/show_bug.cgi?id=2066302): Disable keepalive for canary probe [#726](https://github.com/openshift/cluster-ingress-operator/pull/726)
* [Bug 2017708](https://bugzilla.redhat.com/show_bug.cgi?id=2017708): Change default balancing algorithm to "leastconn" [#670](https://github.com/openshift/cluster-ingress-operator/pull/670)
* [Bug 1998103](https://bugzilla.redhat.com/show_bug.cgi?id=1998103): cleanup condition metrics for deleted ingress controllers [#649](https://github.com/openshift/cluster-ingress-operator/pull/649)
* [Bug 2000414](https://bugzilla.redhat.com/show_bug.cgi?id=2000414): Configure router to use "source" for passthrough [#651](https://github.com/openshift/cluster-ingress-operator/pull/651)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/e9e62957e31cc5fd2166c4c6aeb164c426a90fed...f03d5e4a4ed014035ef97f86c70be30c69243015)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/25c54939bdd02bc8e68f1329fa3ebe16904b3282)

* [Bug 2026089](https://bugzilla.redhat.com/show_bug.cgi?id=2026089): library-go bump [#1320](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1320)
* [Bug 2016213](https://bugzilla.redhat.com/show_bug.cgi?id=2016213): Exempt metrics scrapes from APF. [#1247](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1247)
* [Bug 2012010](https://bugzilla.redhat.com/show_bug.cgi?id=2012010): alerts: give exact oc get apirequestcounts command in APIRemovedInNextReleaseInUse alert [#1241](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1241)
* [Bug 2001244](https://bugzilla.redhat.com/show_bug.cgi?id=2001244): Enforce OpenShift's defined kubelet version skew policies [#1224](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1224)
* [Bug 1993800](https://bugzilla.redhat.com/show_bug.cgi?id=1993800): bump(library-go): staticpod/installer: fix backoff of installers [#1214](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1214)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/7f3081b369dd33f994a0cf80d5ced6d432e3bf8f...25c54939bdd02bc8e68f1329fa3ebe16904b3282)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/7fa48ebf34e8c810ce8cbe8b62a4e10a7326856c)

* [Bug 1993800](https://bugzilla.redhat.com/show_bug.cgi?id=1993800): Bump library-go to include backoff fix of installers [#560](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/560)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/9dc35db7ecc27c5807b5d9b9d1e1de3080416a09...7fa48ebf34e8c810ce8cbe8b62a4e10a7326856c)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/1b3b34440de93395c46c7a6526be9870e8914ce8)

* [Bug 2026110](https://bugzilla.redhat.com/show_bug.cgi?id=2026110): Disable balancedAllocation and add weight for HighNodeUtilization profile [#380](https://github.com/openshift/cluster-kube-scheduler-operator/pull/380)
* [Bug 1993800](https://bugzilla.redhat.com/show_bug.cgi?id=1993800): Bump library-go to include backoff fix of installers [#366](https://github.com/openshift/cluster-kube-scheduler-operator/pull/366)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/170a5a66d6788179e23fa3529a7d5f76ee33caae...1b3b34440de93395c46c7a6526be9870e8914ce8)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/50c639cc7e318c1dab38a2869b928cf703a38515)

* [Bug 2022844](https://bugzilla.redhat.com/show_bug.cgi?id=2022844): Extensive number of requests from storage version operator in cluster – Part 4 [#79](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/79)
* [Bug 2022844](https://bugzilla.redhat.com/show_bug.cgi?id=2022844): Extensive number of requests from storage version operator in cluster – Part 1 [#78](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/78)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/c4f4f8bbfc87b9fe057de2a05e484387eea1fddb...50c639cc7e318c1dab38a2869b928cf703a38515)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/f0a396eee469a3ace9e473c0476a29d8983671eb)

* [Bug 2031047](https://bugzilla.redhat.com/show_bug.cgi?id=2031047): Ensure pending CSR count is valid post approval [#146](https://github.com/openshift/cluster-machine-approver/pull/146)
* [Bug 2032092](https://bugzilla.redhat.com/show_bug.cgi?id=2032092): Replace certificates with generated certificates [#148](https://github.com/openshift/cluster-machine-approver/pull/148)
* [Bug 2024689](https://bugzilla.redhat.com/show_bug.cgi?id=2024689): Allow fallback to serving cert renewal accounting for egress IPs on SDN [#142](https://github.com/openshift/cluster-machine-approver/pull/142)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/724abd216ea546671fbfa4c9060180ff1619c85a...f0a396eee469a3ace9e473c0476a29d8983671eb)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/edfadfb58c4167a62a7a7c1bf164c882b73eedb3)

* [Bug 2030698](https://bugzilla.redhat.com/show_bug.cgi?id=2030698): KubePodCrashLooping may fire when pod is not in CrashLoopBackOff [#1619](https://github.com/openshift/cluster-monitoring-operator/pull/1619)
* [Bug 2039538](https://bugzilla.redhat.com/show_bug.cgi?id=2039538): Add custom profile metric for Node Tuning Operator to telemetry [#1565](https://github.com/openshift/cluster-monitoring-operator/pull/1565)
* [Bug 2018431](https://bugzilla.redhat.com/show_bug.cgi?id=2018431): [4.8] add kube_persistentvolumeclaim_labels and kube_persistentvolume_labels [#1459](https://github.com/openshift/cluster-monitoring-operator/pull/1459)
* [Bug 2012039](https://bugzilla.redhat.com/show_bug.cgi?id=2012039): Allow namespace label in metric allow list [#1436](https://github.com/openshift/cluster-monitoring-operator/pull/1436)
* [Bug 2005205](https://bugzilla.redhat.com/show_bug.cgi?id=2005205): improve update and status reporting 4.8 [#1428](https://github.com/openshift/cluster-monitoring-operator/pull/1428)
* Revert "Bug 1999057: jsonnet: Sync with kube-prometheus" [#1394](https://github.com/openshift/cluster-monitoring-operator/pull/1394)
* [Bug 1999057](https://bugzilla.redhat.com/show_bug.cgi?id=1999057): jsonnet: Sync with kube-prometheus [#1360](https://github.com/openshift/cluster-monitoring-operator/pull/1360)
* [Bug 1997497](https://bugzilla.redhat.com/show_bug.cgi?id=1997497): Backport etcd telemetry [#1344](https://github.com/openshift/cluster-monitoring-operator/pull/1344)
* [Bug 1995699](https://bugzilla.redhat.com/show_bug.cgi?id=1995699): Get insights on series churn during upgrades [#1349](https://github.com/openshift/cluster-monitoring-operator/pull/1349)
* [Bug 1999148](https://bugzilla.redhat.com/show_bug.cgi?id=1999148): alert: ClusterMonitoringOperatorReconciliationErrors: reduce range du… [#1351](https://github.com/openshift/cluster-monitoring-operator/pull/1351)
* [Bug 1991836](https://bugzilla.redhat.com/show_bug.cgi?id=1991836): Revise Alert Severity in OCP 4.8 [#1342](https://github.com/openshift/cluster-monitoring-operator/pull/1342)
* [Bug 1984753](https://bugzilla.redhat.com/show_bug.cgi?id=1984753): jsonnet: Sync with kube-prometheus [#1323](https://github.com/openshift/cluster-monitoring-operator/pull/1323)
* [Bug 1978208](https://bugzilla.redhat.com/show_bug.cgi?id=1978208): Sync dependencies for 4.8 release backports [#1264](https://github.com/openshift/cluster-monitoring-operator/pull/1264)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/e3f9fd789a4561d89bf1ff331232d8c13c98e35c...edfadfb58c4167a62a7a7c1bf164c882b73eedb3)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/6d78d0102eab4e4141533192479dff37dc100e91)

* Adds dougbtv to owners [release-4.8] [#1403](https://github.com/openshift/cluster-network-operator/pull/1403)
* [Bug 2058674](https://bugzilla.redhat.com/show_bug.cgi?id=2058674): ip-reconciler cronjob specification requires hostnetwork, api-int lb usage & proper backoff [backport 4.8] [#1324](https://github.com/openshift/cluster-network-operator/pull/1324)
* [Bug 2038295](https://bugzilla.redhat.com/show_bug.cgi?id=2038295): Backport 4.8 OVN drop icmp frag from other nodes on Azure cluster [#1274](https://github.com/openshift/cluster-network-operator/pull/1274)
* [Bug 2068895](https://bugzilla.redhat.com/show_bug.cgi?id=2068895): Do not apply OVN-Kubernetes PodDisruptionBudget on single-node clusters [#1351](https://github.com/openshift/cluster-network-operator/pull/1351)
* [release 4.8] Updates owners [#1334](https://github.com/openshift/cluster-network-operator/pull/1334)
* [Bug 2054642](https://bugzilla.redhat.com/show_bug.cgi?id=2054642): sbdb and nbdb containers leave pid around if they restarted or crashed [#1310](https://github.com/openshift/cluster-network-operator/pull/1310)
* [Bug 2023426](https://bugzilla.redhat.com/show_bug.cgi?id=2023426): Add ip6tables NOTRACK rules for udp/6081 [#1228](https://github.com/openshift/cluster-network-operator/pull/1228)
* [Bug 2021221](https://bugzilla.redhat.com/show_bug.cgi?id=2021221): ovnkube: set ovn-controller lflow cache limit to 1GB [#1278](https://github.com/openshift/cluster-network-operator/pull/1278)
* [Bug 2034352](https://bugzilla.redhat.com/show_bug.cgi?id=2034352): Whereabouts IP Reconciliaton [backport 4.8] [#1265](https://github.com/openshift/cluster-network-operator/pull/1265)
* [Bug 2022747](https://bugzilla.redhat.com/show_bug.cgi?id=2022747): Allow to use proxy to connect to OSP cloud [#1225](https://github.com/openshift/cluster-network-operator/pull/1225)
* [Bug 2037500](https://bugzilla.redhat.com/show_bug.cgi?id=2037500): Bump openshift/build-machinery-go [#1271](https://github.com/openshift/cluster-network-operator/pull/1271)
* [Bug 2029590](https://bugzilla.redhat.com/show_bug.cgi?id=2029590): Set upgrade strategy on kube-proxy #1244 [#1244](https://github.com/openshift/cluster-network-operator/pull/1244)
* [Bug 2018513](https://bugzilla.redhat.com/show_bug.cgi?id=2018513): ovnkube: use ovn-nbctl daemon monitor mode to restart and log issues [#1211](https://github.com/openshift/cluster-network-operator/pull/1211)
* [Bug 2008589](https://bugzilla.redhat.com/show_bug.cgi?id=2008589): [4.8z] Slow OVN Recovery on SNO [#1200](https://github.com/openshift/cluster-network-operator/pull/1200)
* [Bug 1985308](https://bugzilla.redhat.com/show_bug.cgi?id=1985308): Add a newline between user CAs and system CAs [#1162](https://github.com/openshift/cluster-network-operator/pull/1162)
* [Bug 1990928](https://bugzilla.redhat.com/show_bug.cgi?id=1990928): [Backport 4.8] Whereabouts should have RBAC for leases [#1185](https://github.com/openshift/cluster-network-operator/pull/1185)
* [Bug 1985588](https://bugzilla.redhat.com/show_bug.cgi?id=1985588): Update service network status to reflect dual stack entries [#1164](https://github.com/openshift/cluster-network-operator/pull/1164)
* [Bug 1987046](https://bugzilla.redhat.com/show_bug.cgi?id=1987046): Add pre-puller ds to reduce upgrade downtime [#1167](https://github.com/openshift/cluster-network-operator/pull/1167)
* [Bug 1988425](https://bugzilla.redhat.com/show_bug.cgi?id=1988425): Change to use mountPath: /host [#1169](https://github.com/openshift/cluster-network-operator/pull/1169)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/a5ebd1ebc3549acb84c74145612460f416788e21...6d78d0102eab4e4141533192479dff37dc100e91)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/fd64b6e2d00c8e793fd42fc8bff841aeb3f7dca1)

* [Bug 2018053](https://bugzilla.redhat.com/show_bug.cgi?id=2018053): tuned: add timeout and restarts [#286](https://github.com/openshift/cluster-node-tuning-operator/pull/286)
* [Bug 2013678](https://bugzilla.redhat.com/show_bug.cgi?id=2013678): TuneD: workaround for high CPU utilization of [scheduler] plug-in. [#280](https://github.com/openshift/cluster-node-tuning-operator/pull/280)
* [Bug 1998120](https://bugzilla.redhat.com/show_bug.cgi?id=1998120): Add a cgroup blacklisting rule to parent openshift profile. [#266](https://github.com/openshift/cluster-node-tuning-operator/pull/266)
* [Bug 1999608](https://bugzilla.redhat.com/show_bug.cgi?id=1999608): Reload when deps of recommended profile change. [#268](https://github.com/openshift/cluster-node-tuning-operator/pull/268)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/f784a419c11018dc07799309e08b240de832868f...fd64b6e2d00c8e793fd42fc8bff841aeb3f7dca1)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/7f0e9b6659949421100469e3af399888cca7042e)

* [Bug 2052097](https://bugzilla.redhat.com/show_bug.cgi?id=2052097): global pull secret not working in OCP4.7.4+ for additio… [#493](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/493)
* [Bug 2003946](https://bugzilla.redhat.com/show_bug.cgi?id=2003946): Deploy PDB to prevent more than one replica going unavailable [#473](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/473)
* [Bug 1994655](https://bugzilla.redhat.com/show_bug.cgi?id=1994655): apiservice-controller: don't update the failing condition when an operator has been requested to shutdown [#482](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/482)
* [Bug 1996044](https://bugzilla.redhat.com/show_bug.cgi?id=1996044): bindata: run openshift-apiserver as root explicitly. [#467](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/467)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/d0b22d8766f72cdfa31e85ec4097b7556099dadc...7f0e9b6659949421100469e3af399888cca7042e)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/54f1a906734849db6daf4951346816f005803d66)

* [Bug 2034270](https://bugzilla.redhat.com/show_bug.cgi?id=2034270): Add trusted CA bundle to vsphere operators [#249](https://github.com/openshift/cluster-storage-operator/pull/249)
* [Bug 1996672](https://bugzilla.redhat.com/show_bug.cgi?id=1996672): Add proxy support to cinder CSI [#210](https://github.com/openshift/cluster-storage-operator/pull/210)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/874422cb87565b17402aacf4712408b47d9a527f...54f1a906734849db6daf4951346816f005803d66)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/4b28e9e5d342f14fd599174c2dc2083e5ccdf3b4)

* [Bug 2047434](https://bugzilla.redhat.com/show_bug.cgi?id=2047434): Changing the ClusterNotUpgradeable alert to info [#731](https://github.com/openshift/cluster-version-operator/pull/731)
* [Bug 2038936](https://bugzilla.redhat.com/show_bug.cgi?id=2038936): *: Use --v=2 logging to drop client-side throttling noise [#724](https://github.com/openshift/cluster-version-operator/pull/724)
* [Bug 1982683](https://bugzilla.redhat.com/show_bug.cgi?id=1982683): [release-4.8] Respect noProxy [#691](https://github.com/openshift/cluster-version-operator/pull/691)
* [Bug 2025955](https://bugzilla.redhat.com/show_bug.cgi?id=2025955): Removing the extra indentation [#696](https://github.com/openshift/cluster-version-operator/pull/696)
* [Bug 2015025](https://bugzilla.redhat.com/show_bug.cgi?id=2015025): lib/resourcemerge/imagestream.go: Copy all data for new tag reference [#679](https://github.com/openshift/cluster-version-operator/pull/679)
* [Bug 2011954](https://bugzilla.redhat.com/show_bug.cgi?id=2011954): pkg/cvo/upgradeable: Include messages for multiple-reason Upgradeable=False [#672](https://github.com/openshift/cluster-version-operator/pull/672)
* [Bug 1999092](https://bugzilla.redhat.com/show_bug.cgi?id=1999092): Add and enable admin ack Upgradeable condition gate [#647](https://github.com/openshift/cluster-version-operator/pull/647)
* [Bug 1999777](https://bugzilla.redhat.com/show_bug.cgi?id=1999777): Ensure recent etcd backup before allowing minor-version updates [#649](https://github.com/openshift/cluster-version-operator/pull/649)
* [Bug 1980411](https://bugzilla.redhat.com/show_bug.cgi?id=1980411): [release-4.8] pkg/cvo/egress: Load HTTPS proxy from Proxy status [#627](https://github.com/openshift/cluster-version-operator/pull/627)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/ea6e779ef89710879e2c08c0e5847a5b5e860b28...4b28e9e5d342f14fd599174c2dc2083e5ccdf3b4)


### [configmap-reloader](https://github.com/openshift/configmap-reload/tree/0d221296e3918abc3c1367a1e7c220baf000965a)

* Updating configmap-reload builder & base images to be consistent with ART [#32](https://github.com/openshift/configmap-reload/pull/32)
* [Full changelog](https://github.com/openshift/configmap-reload/compare/abc5c26e2e5034639f271a2b4f360b581da2a17d...0d221296e3918abc3c1367a1e7c220baf000965a)


### [console](https://github.com/openshift/console/tree/7ed376d82fd9b12796a0a8c32f6964517ec9ff8a)

* [Bug 2066365](https://bugzilla.redhat.com/show_bug.cgi?id=2066365): (Topology) Performance improvement by reducing rerenderings and deep-copy toJSON() calls [#11271](https://github.com/openshift/console/pull/11271)
* [Bug 2060450](https://bugzilla.redhat.com/show_bug.cgi?id=2060450): Fix that the preferred namespace was not selected when it contains just numbers [#11134](https://github.com/openshift/console/pull/11134)
* [Bug 2055132](https://bugzilla.redhat.com/show_bug.cgi?id=2055132): Fix TypeError when application has HelmRelease [#11069](https://github.com/openshift/console/pull/11069)
* [Bug 2060616](https://bugzilla.redhat.com/show_bug.cgi?id=2060616): Add error boundary in edit-flows [#11137](https://github.com/openshift/console/pull/11137)
* [Bug 2061266](https://bugzilla.redhat.com/show_bug.cgi?id=2061266): Update e2e test to use 3scale operator to increase test stability [#11141](https://github.com/openshift/console/pull/11141)
* [Bug 2046215](https://bugzilla.redhat.com/show_bug.cgi?id=2046215): Filter superseded helm secrets and fix firehose to support partial metadata [#10936](https://github.com/openshift/console/pull/10936)
* [Bug 2045592](https://bugzilla.redhat.com/show_bug.cgi?id=2045592): Check if name label exists before comparing [#10929](https://github.com/openshift/console/pull/10929)
* [Bug 2048900](https://bugzilla.redhat.com/show_bug.cgi?id=2048900): Fix knative function label cherry pick [#10987](https://github.com/openshift/console/pull/10987)
* [Bug 2045051](https://bugzilla.redhat.com/show_bug.cgi?id=2045051): Add subject name selector field to SinkBinding form [#10925](https://github.com/openshift/console/pull/10925)
* [Bug 2046051](https://bugzilla.redhat.com/show_bug.cgi?id=2046051): Add support for fetching partial metadata and fix helm list page crash [#10932](https://github.com/openshift/console/pull/10932)
* [Bug 2004086](https://bugzilla.redhat.com/show_bug.cgi?id=2004086): Add name field in edit deployment form [#10873](https://github.com/openshift/console/pull/10873)
* [Bug 2046043](https://bugzilla.redhat.com/show_bug.cgi?id=2046043): Topology performance: Do not fetch HPA for each Deployment (Pod Ring) [#10931](https://github.com/openshift/console/pull/10931)
* [Bug 2008141](https://bugzilla.redhat.com/show_bug.cgi?id=2008141): Allow web terminal to be installed in any namespace [#10134](https://github.com/openshift/console/pull/10134)
* [Bug 2019301](https://bugzilla.redhat.com/show_bug.cgi?id=2019301): Check for resource in ServiceBinding spec's service reference [#10376](https://github.com/openshift/console/pull/10376)
* [Bug 2018064](https://bugzilla.redhat.com/show_bug.cgi?id=2018064): fix dev-catalog stuck in loading state [#10346](https://github.com/openshift/console/pull/10346)
* [Bug 2044571](https://bugzilla.redhat.com/show_bug.cgi?id=2044571): Update CRW operator name to fix failing e2e tests [#10918](https://github.com/openshift/console/pull/10918)
* [Bug 2036045](https://bugzilla.redhat.com/show_bug.cgi?id=2036045): fix resource limit form validation [#10788](https://github.com/openshift/console/pull/10788)
* [Bug 2034640](https://bugzilla.redhat.com/show_bug.cgi?id=2034640): cant delete VM with un-owned pvc attached [#10718](https://github.com/openshift/console/pull/10718)
* [Bug 2030443](https://bugzilla.redhat.com/show_bug.cgi?id=2030443): Fix ClusterOperators link [#10638](https://github.com/openshift/console/pull/10638)
* [Bug 2024206](https://bugzilla.redhat.com/show_bug.cgi?id=2024206): Fix resource metrics 403 errors for project admin users [#10496](https://github.com/openshift/console/pull/10496)
* [Bug 2026950](https://bugzilla.redhat.com/show_bug.cgi?id=2026950): Fix autofocus on pf select component for search resource dropdown [#10577](https://github.com/openshift/console/pull/10577)
* [Bug 2017469](https://bugzilla.redhat.com/show_bug.cgi?id=2017469): key not a valid prop name causing display issue in env editor [#10419](https://github.com/openshift/console/pull/10419)
* [Bug 2009224](https://bugzilla.redhat.com/show_bug.cgi?id=2009224): Regular user cannot restore VM snapshot [#10436](https://github.com/openshift/console/pull/10436)
* [Bug 2020162](https://bugzilla.redhat.com/show_bug.cgi?id=2020162): PVC is deleted along with VM even with "Delete Disks" unchecked [#10399](https://github.com/openshift/console/pull/10399)
* [Bug 2017326](https://bugzilla.redhat.com/show_bug.cgi?id=2017326): Update PatternFly/react-console [#10384](https://github.com/openshift/console/pull/10384)
* [Bug 1984102](https://bugzilla.redhat.com/show_bug.cgi?id=1984102): Switch Cypress OLM tests to use supported Red Hat operators [#9560](https://github.com/openshift/console/pull/9560)
* [Bug 2005871](https://bugzilla.redhat.com/show_bug.cgi?id=2005871): Cannot create Network Attachment Definition through UI [#10314](https://github.com/openshift/console/pull/10314)
* [Bug 1997901](https://bugzilla.redhat.com/show_bug.cgi?id=1997901): Cannot delete user created vm template [#10367](https://github.com/openshift/console/pull/10367)
* [Bug 2001212](https://bugzilla.redhat.com/show_bug.cgi?id=2001212): Notifications is not translated on the top right bar [#10040](https://github.com/openshift/console/pull/10040)
* [Bug 2002649](https://bugzilla.redhat.com/show_bug.cgi?id=2002649): Fix SerialConsole display bug [#10034](https://github.com/openshift/console/pull/10034)
* [Bug 1994983](https://bugzilla.redhat.com/show_bug.cgi?id=1994983): use strict promoted template list [#9824](https://github.com/openshift/console/pull/9824)
* [Bug 1977659](https://bugzilla.redhat.com/show_bug.cgi?id=1977659): Adjusting to new reference models changes - cherry-picked rls 4.8 [#9379](https://github.com/openshift/console/pull/9379)
* [Bug 2013091](https://bugzilla.redhat.com/show_bug.cgi?id=2013091): adds check for status in ksvc in util logic [#10211](https://github.com/openshift/console/pull/10211)
* [Bug 1998692](https://bugzilla.redhat.com/show_bug.cgi?id=1998692): Normal user cannot create VM because it cannot access v2v-vmware [#10171](https://github.com/openshift/console/pull/10171)
* (4.8 Backport) Bug 1981416: Change OCM links from cloud. to console.redhat.com [#9470](https://github.com/openshift/console/pull/9470)
* [Bug 2010076](https://bugzilla.redhat.com/show_bug.cgi?id=2010076): Update prow setup v4.8 [#10168](https://github.com/openshift/console/pull/10168)
* [Bug 1999717](https://bugzilla.redhat.com/show_bug.cgi?id=1999717): Block and File and Object dashboards should not be part of OCP Console for ODF Managed Services [#9952](https://github.com/openshift/console/pull/9952)
* [Bug 2005917](https://bugzilla.redhat.com/show_bug.cgi?id=2005917): CONSOLE-2152: Improve upgrade messaging when ClusterVersion Upgradeable=False [#10103](https://github.com/openshift/console/pull/10103)
* [Bug 1993236](https://bugzilla.redhat.com/show_bug.cgi?id=1993236): Do not drop environment variables without name but with a value, also fix crash when ref is empty [#9799](https://github.com/openshift/console/pull/9799)
* [Bug 2000474](https://bugzilla.redhat.com/show_bug.cgi?id=2000474): Create BuildConfig webhook secrets before creating knative resources [#9970](https://github.com/openshift/console/pull/9970)
* [Bug 1996758](https://bugzilla.redhat.com/show_bug.cgi?id=1996758): Update Resource Dropdown Tech preview text [Release-4.8] [#9838](https://github.com/openshift/console/pull/9838)
* [Bug 1990141](https://bugzilla.redhat.com/show_bug.cgi?id=1990141): Console overview operators shown upgrading when still waiting on approval [#9732](https://github.com/openshift/console/pull/9732)
* [Bug 1995118](https://bugzilla.redhat.com/show_bug.cgi?id=1995118): Virtualization is not available in Home Overview [#9826](https://github.com/openshift/console/pull/9826)
* [Bug 1999931](https://bugzilla.redhat.com/show_bug.cgi?id=1999931): move event sources add option to serverless add group [#9958](https://github.com/openshift/console/pull/9958)
* [Bug 1984367](https://bugzilla.redhat.com/show_bug.cgi?id=1984367): OCS deployment using Multus: UI allows StorageCluster creation with empty public and cluster network in "Internal - Attached Devices" [#9566](https://github.com/openshift/console/pull/9566)
* [Bug 1992720](https://bugzilla.redhat.com/show_bug.cgi?id=1992720): Update Ingress to v1 API version [#9788](https://github.com/openshift/console/pull/9788)
* [Bug 1983644](https://bugzilla.redhat.com/show_bug.cgi?id=1983644): Add a TechPreviewBadge for Multus [#9539](https://github.com/openshift/console/pull/9539)
* [Bug 1972987](https://bugzilla.redhat.com/show_bug.cgi?id=1972987): chore(i18n): update translations [#9284](https://github.com/openshift/console/pull/9284)
* [Bug 1982458](https://bugzilla.redhat.com/show_bug.cgi?id=1982458): Remove kube admin notifier for kubeadmin crc user [#9516](https://github.com/openshift/console/pull/9516)
* [Bug 1985193](https://bugzilla.redhat.com/show_bug.cgi?id=1985193): Add create resource extension [#9601](https://github.com/openshift/console/pull/9601)
* [Bug 1989798](https://bugzilla.redhat.com/show_bug.cgi?id=1989798): Fix previously deleted dragged files that show up in import yaml editor [#9718](https://github.com/openshift/console/pull/9718)
* [Bug 1985081](https://bugzilla.redhat.com/show_bug.cgi?id=1985081): Fix Pipeline Download All [#9596](https://github.com/openshift/console/pull/9596)
* [Bug 1987167](https://bugzilla.redhat.com/show_bug.cgi?id=1987167): Add inspect url to devconsole monitoring chart [#9671](https://github.com/openshift/console/pull/9671)
* [Full changelog](https://github.com/openshift/console/compare/71e0f8426c393d35c16372e4175b521b552b9f30...7ed376d82fd9b12796a0a8c32f6964517ec9ff8a)


### [console-operator](https://github.com/openshift/console-operator/tree/2bee8bd9b1c9ad46015f4e0ff13b6b5ce09fd2b6)

* [Bug 2071200](https://bugzilla.redhat.com/show_bug.cgi?id=2071200): Fix setting of custom cert for default route [#643](https://github.com/openshift/console-operator/pull/643)
* [Bug 2008141](https://bugzilla.redhat.com/show_bug.cgi?id=2008141): Change web terminal subscription permissions from get to list [#595](https://github.com/openshift/console-operator/pull/595)
* [Bug 2041359](https://bugzilla.redhat.com/show_bug.cgi?id=2041359): Bump build-machinery-go for console-operator to pickup change in yaml-patch repository [#627](https://github.com/openshift/console-operator/pull/627)
* [Bug 2018391](https://bugzilla.redhat.com/show_bug.cgi?id=2018391): Remove SimpleHTTP 'server' response header value [#606](https://github.com/openshift/console-operator/pull/606)
* [Bug 1987315](https://bugzilla.redhat.com/show_bug.cgi?id=1987315): Bump openshift/api to add missing 'include.release.openshift.io/single-node-developer' annotation to the ConsolePlugin CRD [#591](https://github.com/openshift/console-operator/pull/591)
* [Bug 2003639](https://bugzilla.redhat.com/show_bug.cgi?id=2003639): Use kubernetes.io/hostname for workload anti-affi… …nity [#589](https://github.com/openshift/console-operator/pull/589)
* [Bug 2001268](https://bugzilla.redhat.com/show_bug.cgi?id=2001268): console-operator should report Available=true when at least available replica exists [#583](https://github.com/openshift/console-operator/pull/583)
* [Full changelog](https://github.com/openshift/console-operator/compare/696f4645f37ded0426b04adcc1ac5ed4d79053c0...2bee8bd9b1c9ad46015f4e0ff13b6b5ce09fd2b6)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/f6ffb0d7c2935db9d349f8dc1c51d9ea1b0df5ce)

* [Bug 2002554](https://bugzilla.redhat.com/show_bug.cgi?id=2002554): Do not degrade cluster on failure to reach Manila [#125](https://github.com/openshift/csi-driver-manila-operator/pull/125)
* [Bug 1987020](https://bugzilla.redhat.com/show_bug.cgi?id=1987020): Use cluster Proxy when available [#109](https://github.com/openshift/csi-driver-manila-operator/pull/109)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/7b4f3664474da0020c1f37971df7fa751572244b...f6ffb0d7c2935db9d349f8dc1c51d9ea1b0df5ce)


### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/583088efa37346e23ed056b57ea24e61b0e5b9d8)

* Updating csi-driver-nfs builder & base images to be consistent with ART [#40](https://github.com/openshift/csi-driver-nfs/pull/40)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/9404d343c020fd1806691704f64d930c779ad639...583088efa37346e23ed056b57ea24e61b0e5b9d8)


### [docker-builder](https://github.com/openshift/builder/tree/dc2c0061e5db06d96bac966bdfe2603fe7bbfa06)

* [Bug 2053122](https://bugzilla.redhat.com/show_bug.cgi?id=2053122): [release-4.8] getAssembleUser(): strip the group part out before checking the UID [#289](https://github.com/openshift/builder/pull/289)
* Update OWNERS file [#290](https://github.com/openshift/builder/pull/290)
* [Bug 1992639](https://bugzilla.redhat.com/show_bug.cgi?id=1992639): bump(s2i): revert incorrect ssh scp fix [#259](https://github.com/openshift/builder/pull/259)
* [Full changelog](https://github.com/openshift/builder/compare/c089361b7e5eae73addb235621ae69d63bd6b2c6...dc2c0061e5db06d96bac966bdfe2603fe7bbfa06)


### [docker-registry](https://github.com/openshift/image-registry/tree/bc68848bf1e6fe91378510a0b0ef30cfcb6ec39e)

* [Bug 2042678](https://bugzilla.redhat.com/show_bug.cgi?id=2042678): Fix auth for docker.io images [#306](https://github.com/openshift/image-registry/pull/306)
* [Bug 2053223](https://bugzilla.redhat.com/show_bug.cgi?id=2053223): Fix pull-through for images that have dots in their namespace [#310](https://github.com/openshift/image-registry/pull/310)
* [Bug 2012163](https://bugzilla.redhat.com/show_bug.cgi?id=2012163): Supporting mirror authentication during pull through [#297](https://github.com/openshift/image-registry/pull/297)
* Updating openshift-enterprise-registry builder & base images to be consistent with ART [#270](https://github.com/openshift/image-registry/pull/270)
* [Full changelog](https://github.com/openshift/image-registry/compare/a87e6c50cd973723de8b5471453de7c345403d56...bc68848bf1e6fe91378510a0b0ef30cfcb6ec39e)


### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/076a9209048c7d478f59084409c2dca5e3a6f2d8)

* [Bug 2031938](https://bugzilla.redhat.com/show_bug.cgi?id=2031938): Add e2e test to 4.9 branch [#72](https://github.com/openshift/driver-toolkit/pull/72)
* [Bug 2011460](https://bugzilla.redhat.com/show_bug.cgi?id=2011460): Add imagestream for driver-toolkit [#65](https://github.com/openshift/driver-toolkit/pull/65)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/72e1f298e1ad32747e0edb3491ea90c8906855f5...076a9209048c7d478f59084409c2dca5e3a6f2d8)


### [etcd](https://github.com/openshift/etcd/tree/3cc60d0a8d1b0df6c0262809ac5b14611f300c86)

* Update OWNERS [#125](https://github.com/openshift/etcd/pull/125)
* [Full changelog](https://github.com/openshift/etcd/compare/aefa6bf59b381938b50ab9ba4a7add9b4a767e27...3cc60d0a8d1b0df6c0262809ac5b14611f300c86)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/3978a2100d6ff938db2a0cf8d962ce9dce0c6e4c)

* [Bug 2052955](https://bugzilla.redhat.com/show_bug.cgi?id=2052955): Disable uuid checks on XFS [#23](https://github.com/openshift/gcp-pd-csi-driver/pull/23)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/0b618896c6b7c977f96d133060c54ed1b6c87540...3978a2100d6ff938db2a0cf8d962ce9dce0c6e4c)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/6b3cbdd0f0b90bc6b28fec91cce5b3c94d7d56a9)

* [Bug 2077004](https://bugzilla.redhat.com/show_bug.cgi?id=2077004): Rebase 1.21.11 [#1246](https://github.com/openshift/kubernetes/pull/1246)
* [Bug 2063953](https://bugzilla.redhat.com/show_bug.cgi?id=2063953): UPSTREAM: <carry>: use hardcoded rest mapper from library-go [#1245](https://github.com/openshift/kubernetes/pull/1245)
* [Bug 2075043](https://bugzilla.redhat.com/show_bug.cgi?id=2075043): golang toolchain unsupported parsers tag [#1240](https://github.com/openshift/kubernetes/pull/1240)
* [Bug 2043808](https://bugzilla.redhat.com/show_bug.cgi?id=2043808): IPs with leading zeros are still valid in the apiserver [#1173](https://github.com/openshift/kubernetes/pull/1173)
* [Bug 2060494](https://bugzilla.redhat.com/show_bug.cgi?id=2060494): Backports inotify leak fix into kubelet [#1203](https://github.com/openshift/kubernetes/pull/1203)
* [Bug 2024642](https://bugzilla.redhat.com/show_bug.cgi?id=2024642): Rebase v1.21.8 [#1102](https://github.com/openshift/kubernetes/pull/1102)
* [Bug 2050131](https://bugzilla.redhat.com/show_bug.cgi?id=2050131): UPSTREAM: <carry>: set correctly static pods CPUs when workload partitioning is disabled [#1168](https://github.com/openshift/kubernetes/pull/1168)
* [Bug 2039377](https://bugzilla.redhat.com/show_bug.cgi?id=2039377): UPSTREAM: 89885: SQUASH: Retry fetching clouds.conf [#1108](https://github.com/openshift/kubernetes/pull/1108)
* [Bug 2029466](https://bugzilla.redhat.com/show_bug.cgi?id=2029466): UPSTREAM: 107014: Mark volume as uncertain after Unmount* fails [#1146](https://github.com/openshift/kubernetes/pull/1146)
* [Bug 2024995](https://bugzilla.redhat.com/show_bug.cgi?id=2024995): Fix subpath source check [#1067](https://github.com/openshift/kubernetes/pull/1067)
* [Bug 2032325](https://bugzilla.redhat.com/show_bug.cgi?id=2032325): UPSTREAM: <carry>: api request counts for current hour are incorrect [#1092](https://github.com/openshift/kubernetes/pull/1092)
* [Bug 2022741](https://bugzilla.redhat.com/show_bug.cgi?id=2022741): UPSTREAM: 106260: Don't guess SELinux support on error [#1054](https://github.com/openshift/kubernetes/pull/1054)
* [Bug 2021997](https://bugzilla.redhat.com/show_bug.cgi?id=2021997): Read k8s version from hyperkube Dockerfile [#1045](https://github.com/openshift/kubernetes/pull/1045)
* Updating openshift-enterprise-hyperkube builder & base images to be consistent with ART [#559](https://github.com/openshift/kubernetes/pull/559)
* [Bug 2017027](https://bugzilla.redhat.com/show_bug.cgi?id=2017027): UPSTREAM: <drop>: bump apiserver-library-go [#1069](https://github.com/openshift/kubernetes/pull/1069)
* [Bug 2022265](https://bugzilla.redhat.com/show_bug.cgi?id=2022265): Rebase v1.21.6 [#1060](https://github.com/openshift/kubernetes/pull/1060)
* Updating openshift-enterprise-pod images to be consistent with ART [#680](https://github.com/openshift/kubernetes/pull/680)
* [Bug 2020644](https://bugzilla.redhat.com/show_bug.cgi?id=2020644): Image policy should mutate DeploymentConfigs, StatefulSets, and new CronJobs [#1050](https://github.com/openshift/kubernetes/pull/1050)
* [Bug 1994655](https://bugzilla.redhat.com/show_bug.cgi?id=1994655): openshift-apiserver should not set Available=False APIServicesAvailable on update [#955](https://github.com/openshift/kubernetes/pull/955)
* [Bug 2008403](https://bugzilla.redhat.com/show_bug.cgi?id=2008403): Rebase v1.21.5 [#981](https://github.com/openshift/kubernetes/pull/981)
* [Bug 2011460](https://bugzilla.redhat.com/show_bug.cgi?id=2011460): UPSTREAM: <carry>: openshift-hack/images/os/Dockerfile: Add io.openshift.build.versions, etc. [#1005](https://github.com/openshift/kubernetes/pull/1005)
* [Bug 1995714](https://bugzilla.redhat.com/show_bug.cgi?id=1995714): UPSTREAM: <carry>: admission/managementcpusoverride: cover the roll-back case [#895](https://github.com/openshift/kubernetes/pull/895)
* [Bug 1994457](https://bugzilla.redhat.com/show_bug.cgi?id=1994457): Update to kubernetes 1.21.4 [#888](https://github.com/openshift/kubernetes/pull/888)
* [Bug 1993754](https://bugzilla.redhat.com/show_bug.cgi?id=1993754): UPSTREAM: 104347: Pass additional flags to subpath mount to avoid fla… [#940](https://github.com/openshift/kubernetes/pull/940)
* [Bug 1998391](https://bugzilla.redhat.com/show_bug.cgi?id=1998391): UPSTREAM: 104530: [1.21] bump runc to 1.0.2 [#912](https://github.com/openshift/kubernetes/pull/912)
* [Full changelog](https://github.com/openshift/kubernetes/compare/98073871f173baaa04dc2bafab50effd62c308a6...6b3cbdd0f0b90bc6b28fec91cce5b3c94d7d56a9)


### [insights-operator](https://github.com/openshift/insights-operator/tree/d7b81e65acdb8ef175037c4d4c5dafedf204e6e6)

* [Bug 2077765](https://bugzilla.redhat.com/show_bug.cgi?id=2077765): Gather namespace names with overlapping UIDs (#605) (#611) (#612) [#605](https://github.com/openshift/insights-operator/pull/605)
* [Bug 2033546](https://bugzilla.redhat.com/show_bug.cgi?id=2033546): Gather all CostManagementMericsConfig definitions. (#525) (#569) [#525](https://github.com/openshift/insights-operator/pull/525)
* Update OWNERS (#543) [#543](https://github.com/openshift/insights-operator/pull/543)
* [Bug 2027720](https://bugzilla.redhat.com/show_bug.cgi?id=2027720): gather webhook configurations (#508) (#560) [#508](https://github.com/openshift/insights-operator/pull/508)
* [Bug 2026646](https://bugzilla.redhat.com/show_bug.cgi?id=2026646): Gather all the container logs from related namespaces of degraded clusteroperator (#516) (#554) [#516](https://github.com/openshift/insights-operator/pull/516)
* [Bug 2021572](https://bugzilla.redhat.com/show_bug.cgi?id=2021572): Anonymize identity provider attributes in the (#520) (#527) (#541) [#520](https://github.com/openshift/insights-operator/pull/520)
* [Bug 2020601](https://bugzilla.redhat.com/show_bug.cgi?id=2020601): Anonymize the ImageRegistry storage information also in status (#536) [#536](https://github.com/openshift/insights-operator/pull/536)
* obfuscation ovn clusters bug (#523) [#523](https://github.com/openshift/insights-operator/pull/523)
* Bug TBD: Gather installed PSP names (#489) (#490) [#489](https://github.com/openshift/insights-operator/pull/489)
* [Bug 1977342](https://bugzilla.redhat.com/show_bug.cgi?id=1977342): Fix obfuscation translation table secret 4.8 (#467) [#467](https://github.com/openshift/insights-operator/pull/467)
* [Full changelog](https://github.com/openshift/insights-operator/compare/bc15362e17714275144f51e1f74183622ae872ac...d7b81e65acdb8ef175037c4d4c5dafedf204e6e6)


### [ironic](https://github.com/openshift/ironic-image/tree/fa8525ea51101fb69b8766d927a5123986a74725)

* [Bug 2023765](https://bugzilla.redhat.com/show_bug.cgi?id=2023765): Compare IPs using the short form of IPv6 address [#233](https://github.com/openshift/ironic-image/pull/233)
* [Bug 2017413](https://bugzilla.redhat.com/show_bug.cgi?id=2017413): [4.8] fix Image provisioning fails with file name too long [#229](https://github.com/openshift/ironic-image/pull/229)
* [Bug 2025755](https://bugzilla.redhat.com/show_bug.cgi?id=2025755): Enable vMedia provisioning of SuperMicro X11/X12 [#237](https://github.com/openshift/ironic-image/pull/237)
* [Bug 2003035](https://bugzilla.redhat.com/show_bug.cgi?id=2003035): Sync sushy to include the latest bugfixes for 4.8 [#214](https://github.com/openshift/ironic-image/pull/214)
* [Bug 1991979](https://bugzilla.redhat.com/show_bug.cgi?id=1991979): [4.8] Sync image with ironic [#206](https://github.com/openshift/ironic-image/pull/206)
* [Full changelog](https://github.com/openshift/ironic-image/compare/3c80823993f1d9e5d8cae95b309a9f485f69f6fb...fa8525ea51101fb69b8766d927a5123986a74725)


### [ironic-hardware-inventory-recorder](https://github.com/openshift/ironic-hardware-inventory-recorder-image/tree/b3ecae8d1c6cd84a8784cf3dd17532797af7b724)

* Updating ironic-hardware-inventory-recorder-image builder & base images to be consistent with ART [#504](https://github.com/openshift/ironic-hardware-inventory-recorder-image/pull/504)
* [Full changelog](https://github.com/openshift/ironic-hardware-inventory-recorder-image/compare/61c4cc7dc99601fe32b239be8923a6ed693908b0...b3ecae8d1c6cd84a8784cf3dd17532797af7b724)


### [ironic-inspector](https://github.com/openshift/ironic-inspector-image/tree/08761ed526b7817de7c92e0d621698404fca7a05)

* [Bug 2023765](https://bugzilla.redhat.com/show_bug.cgi?id=2023765): For inspector, compare IPs using the short form of IPv6 address [#71](https://github.com/openshift/ironic-inspector-image/pull/71)
* [Full changelog](https://github.com/openshift/ironic-inspector-image/compare/9aafd074adf6dbc7ee7c2c3150568578e82acc3f...08761ed526b7817de7c92e0d621698404fca7a05)


### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/dceaf1333634a4aea3f211849e81a6247160122b)

* [Bug 2005805](https://bugzilla.redhat.com/show_bug.cgi?id=2005805): Clear proxy env variables if go would have [#72](https://github.com/openshift/ironic-rhcos-downloader/pull/72)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/71967e7deca9e9d0e094cbaedb7fe7ce0267dd84...dceaf1333634a4aea3f211849e81a6247160122b)


### [jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs](https://github.com/openshift/jenkins/tree/ad2b65ec417ce327f2552c187da253e98bc041ad)

* [Bug 2078477](https://bugzilla.redhat.com/show_bug.cgi?id=2078477): set necessary JVM args to allow jenkins JVM to come up on a FIPS node [#1439](https://github.com/openshift/jenkins/pull/1439)
* [Bug 2058750](https://bugzilla.redhat.com/show_bug.cgi?id=2058750): [release-4.8] 2022-02-15 Security Advisory [#1408](https://github.com/openshift/jenkins/pull/1408)
* [Bug 2055911](https://bugzilla.redhat.com/show_bug.cgi?id=2055911): bump openshift-sync to 1.0.53 [#1392](https://github.com/openshift/jenkins/pull/1392)
* [Bug 2044940](https://bugzilla.redhat.com/show_bug.cgi?id=2044940): Jenkins Fixes for CVE-2022-20617 and CVE-2022-20612 [#1370](https://github.com/openshift/jenkins/pull/1370)
* [Bug 2038960](https://bugzilla.redhat.com/show_bug.cgi?id=2038960): bump sync plugin to 1.0.52 [#1362](https://github.com/openshift/jenkins/pull/1362)
* [Bug 2037348](https://bugzilla.redhat.com/show_bug.cgi?id=2037348): Update openshift-sync-plugin to 1.0.51 and various dependant plugins [#1360](https://github.com/openshift/jenkins/pull/1360)
* [Bug 2020614](https://bugzilla.redhat.com/show_bug.cgi?id=2020614): Update Jenkins and plugins per 2021-11 advisory [#1347](https://github.com/openshift/jenkins/pull/1347)
* [Bug 2008114](https://bugzilla.redhat.com/show_bug.cgi?id=2008114): Upgrade Jenkins to 2.289.3 (and related fixes) [#1324](https://github.com/openshift/jenkins/pull/1324)
* [Full changelog](https://github.com/openshift/jenkins/compare/8f554e2ad7ab8636cdbf55b5d0bde4577a5c0af6...ad2b65ec417ce327f2552c187da253e98bc041ad)


### [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter/tree/bfffea3bf70fc5203814886f6483a569f2f22c87)

* [Bug 2002281](https://bugzilla.redhat.com/show_bug.cgi?id=2002281): 4.8: pkg/resourceprovider: guard from negative metrics [#55](https://github.com/openshift/k8s-prometheus-adapter/pull/55)
* [Full changelog](https://github.com/openshift/k8s-prometheus-adapter/compare/2856bc27f7319c069c02cbc5210852c34ef6e4ef...bfffea3bf70fc5203814886f6483a569f2f22c87)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/e709078839d1f216ac1de476c1a26de50b07ed04)

* Remove some binaries that accidentally got committed [#398](https://github.com/openshift/sdn/pull/398)
* [Bug 2027397](https://bugzilla.redhat.com/show_bug.cgi?id=2027397): [EgressIP] move ct(commit) action from OVS group to flow [#377](https://github.com/openshift/sdn/pull/377)
* [Bug 2014166](https://bugzilla.redhat.com/show_bug.cgi?id=2014166): Remove locking from EgressIPTracker.Ping [#362](https://github.com/openshift/sdn/pull/362)
* [Bug 2002290](https://bugzilla.redhat.com/show_bug.cgi?id=2002290): [4.8] proxy: don't re-check every userspace proxy rule on every change [#347](https://github.com/openshift/sdn/pull/347)
* [Bug 1987239](https://bugzilla.redhat.com/show_bug.cgi?id=1987239): when assigning and releasing egressIP try more than once before failing [#326](https://github.com/openshift/sdn/pull/326)
* [Bug 1999946](https://bugzilla.redhat.com/show_bug.cgi?id=1999946): improve SDN's OVS healthcheck and logging [#341](https://github.com/openshift/sdn/pull/341)
* [Bug 1995871](https://bugzilla.redhat.com/show_bug.cgi?id=1995871): Disable conntrack for vxlan traffic [#337](https://github.com/openshift/sdn/pull/337)
* [Full changelog](https://github.com/openshift/sdn/compare/6ac86f3f551508a892ee0d8a781475d9d1262537...e709078839d1f216ac1de476c1a26de50b07ed04)


### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/ddd2c3adeac4d31711a7949c347f444ee4fdce6d)

* [Bug 2037745](https://bugzilla.redhat.com/show_bug.cgi?id=2037745): Improve retrieval of Trunks info [#621](https://github.com/openshift/kuryr-kubernetes/pull/621)
* [Bug 2028307](https://bugzilla.redhat.com/show_bug.cgi?id=2028307): [4.8] Do not restart Kuryr-Controller when LB is stuck in PENDING_UPDATE state or Neutron port is DOWN [#607](https://github.com/openshift/kuryr-kubernetes/pull/607)
* [Bug 2028274](https://bugzilla.redhat.com/show_bug.cgi?id=2028274): Ensure DOWN subports are cleaned up [#606](https://github.com/openshift/kuryr-kubernetes/pull/606)
* [Bug 2022722](https://bugzilla.redhat.com/show_bug.cgi?id=2022722): Make completed Pods Ports reusable [#600](https://github.com/openshift/kuryr-kubernetes/pull/600)
* [Bug 2018232](https://bugzilla.redhat.com/show_bug.cgi?id=2018232): Update TOX_CONSTRAINTS_FILE for stable/xena [#587](https://github.com/openshift/kuryr-kubernetes/pull/587)
* [Bug 1995013](https://bugzilla.redhat.com/show_bug.cgi?id=1995013): Remove ep_slices from klb on endpoint delete event [#550](https://github.com/openshift/kuryr-kubernetes/pull/550)
* [Bug 1989550](https://bugzilla.redhat.com/show_bug.cgi?id=1989550): Increase keystoneauth's connection pool size [#546](https://github.com/openshift/kuryr-kubernetes/pull/546)
* [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/8a4c2d85d5e5ce17214e989b11b33a2584bcb199...ddd2c3adeac4d31711a7949c347f444ee4fdce6d)


### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/9542e5ac08b7731a37d20c881695aab904201c22)

* Updating ose-libvirt-machine-controllers builder & base images to be consistent with ART [#217](https://github.com/openshift/cluster-api-provider-libvirt/pull/217)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/1a48d4b99ab5a2ce89fa909d12f3256f7489544f...9542e5ac08b7731a37d20c881695aab904201c22)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/edc3e864006486a7a85e2e5e4297e307339e9f0e)

* [Bug 2048496](https://bugzilla.redhat.com/show_bug.cgi?id=2048496): Fix user-agent in vCenter sessions list [#984](https://github.com/openshift/machine-api-operator/pull/984)
* [Bug 2027896](https://bugzilla.redhat.com/show_bug.cgi?id=2027896): [release-4.8] Add support for Azure Marketplace Images [#970](https://github.com/openshift/machine-api-operator/pull/970)
* [Bug 2026562](https://bugzilla.redhat.com/show_bug.cgi?id=2026562): MaxUnhealthy should not be a string type [#962](https://github.com/openshift/machine-api-operator/pull/962)
* [Bug 2022838](https://bugzilla.redhat.com/show_bug.cgi?id=2022838): GCP CI runs are complaining about APIs not being enabled [#953](https://github.com/openshift/machine-api-operator/pull/953)
* [Bug 1999585](https://bugzilla.redhat.com/show_bug.cgi?id=1999585): [release-4.8] add alert for machine with long deletion phase [#908](https://github.com/openshift/machine-api-operator/pull/908)
* [Bug 2000038](https://bugzilla.redhat.com/show_bug.cgi?id=2000038): Respect MaxUnhealthy limit for external remediation [#910](https://github.com/openshift/machine-api-operator/pull/910)
* [Bug 1993117](https://bugzilla.redhat.com/show_bug.cgi?id=1993117): Make sure nodes don't have attached volumes before vm deletion [#903](https://github.com/openshift/machine-api-operator/pull/903)
* [Bug 1977634](https://bugzilla.redhat.com/show_bug.cgi?id=1977634): Prevent machine from stucking in Deleting phase on vSphere if related node object not found [#896](https://github.com/openshift/machine-api-operator/pull/896)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/115522033fd678820d70e570e6748ba488b36115...edc3e864006486a7a85e2e5e4297e307339e9f0e)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/58e73629d83330deae8b829b890b004de22b836b)

* [Bug 2057544](https://bugzilla.redhat.com/show_bug.cgi?id=2057544): daemon: Explicitly start rpm-ostreed, restart if we detect active txn [#2967](https://github.com/openshift/machine-config-operator/pull/2967)
* [Bug 2062655](https://bugzilla.redhat.com/show_bug.cgi?id=2062655): Fix bad cherry-pick at 9f7a7eb96 [#3065](https://github.com/openshift/machine-config-operator/pull/3065)
* [Bug 2062655](https://bugzilla.redhat.com/show_bug.cgi?id=2062655): Improvements for configure-ovs script [#3004](https://github.com/openshift/machine-config-operator/pull/3004)
* [Bug 2025396](https://bugzilla.redhat.com/show_bug.cgi?id=2025396): annotate rendered config with OCP version [#2972](https://github.com/openshift/machine-config-operator/pull/2972)
* [Bug 2059330](https://bugzilla.redhat.com/show_bug.cgi?id=2059330): ovs-configuration: use lower than NM default ethernet route metric [#2974](https://github.com/openshift/machine-config-operator/pull/2974)
* [Bug 2058789](https://bugzilla.redhat.com/show_bug.cgi?id=2058789): Prepend to search domains instead of replacing [#2970](https://github.com/openshift/machine-config-operator/pull/2970)
* [Bug 2028854](https://bugzilla.redhat.com/show_bug.cgi?id=2028854): Backport of SystemMemoryExceedsReservation alert rule [#2956](https://github.com/openshift/machine-config-operator/pull/2956)
* [Bug 2032996](https://bugzilla.redhat.com/show_bug.cgi?id=2032996): fixes 1 to 1 containerruntime config mapping [#2877](https://github.com/openshift/machine-config-operator/pull/2877)
* [Bug 2053720](https://bugzilla.redhat.com/show_bug.cgi?id=2053720): Avoid dynamically allocated port range for haproxy [#2951](https://github.com/openshift/machine-config-operator/pull/2951)
* [Bug 2028025](https://bugzilla.redhat.com/show_bug.cgi?id=2028025): [Release 4.8] daemon: make cordon/uncordon more robust and better logging [#2853](https://github.com/openshift/machine-config-operator/pull/2853)
* [Bug 2017493](https://bugzilla.redhat.com/show_bug.cgi?id=2017493): configure-ovs: Persist addr-gen-mode for ipv6 connections [#2810](https://github.com/openshift/machine-config-operator/pull/2810)
* [Bug 2021073](https://bugzilla.redhat.com/show_bug.cgi?id=2021073): [ipi onprem] cherry pick Keepalived default ingress scripts fixes [#2826](https://github.com/openshift/machine-config-operator/pull/2826)
* [Bug 2026085](https://bugzilla.redhat.com/show_bug.cgi?id=2026085): Send WARN message to stderr [#2836](https://github.com/openshift/machine-config-operator/pull/2836)
* [Bug 2024511](https://bugzilla.redhat.com/show_bug.cgi?id=2024511): [release-4.8] [on-prem] Manual backporting of keepalived arp retries [#2831](https://github.com/openshift/machine-config-operator/pull/2831)
* [Bug 2016275](https://bugzilla.redhat.com/show_bug.cgi?id=2016275): [on-prem] Set coredns bufsize to 512 [#2807](https://github.com/openshift/machine-config-operator/pull/2807)
* [Bug 2011083](https://bugzilla.redhat.com/show_bug.cgi?id=2011083): templates: Silence audit events from container infra by default [#2793](https://github.com/openshift/machine-config-operator/pull/2793)
* [Bug 1985736](https://bugzilla.redhat.com/show_bug.cgi?id=1985736): [ON-PREM] HAProxy - Verify that NM prepender script was applied using initcontainer [#2692](https://github.com/openshift/machine-config-operator/pull/2692)
* [Bug 2000958](https://bugzilla.redhat.com/show_bug.cgi?id=2000958): fixes 1 to 1 kubelet config mapping [#2753](https://github.com/openshift/machine-config-operator/pull/2753)
* [Bug 1999531](https://bugzilla.redhat.com/show_bug.cgi?id=1999531): Set timeoutSeconds for keepalived liveness probe [#2741](https://github.com/openshift/machine-config-operator/pull/2741)
* [Bug 2004122](https://bugzilla.redhat.com/show_bug.cgi?id=2004122): Set ovs syslog level to info [#2762](https://github.com/openshift/machine-config-operator/pull/2762)
* [Bug 1973873](https://bugzilla.redhat.com/show_bug.cgi?id=1973873): match tlsSecurityProfile  doc with kubelet.conf file [#2628](https://github.com/openshift/machine-config-operator/pull/2628)
* [Bug 2000500](https://bugzilla.redhat.com/show_bug.cgi?id=2000500): bump SystemMemoryExceedsReservation alert threshold to 95% [#2748](https://github.com/openshift/machine-config-operator/pull/2748)
* [Bug 1976110](https://bugzilla.redhat.com/show_bug.cgi?id=1976110): configure-ovs: fix nondeterministic master in slave profiles [#2644](https://github.com/openshift/machine-config-operator/pull/2644)
* [Bug 1985735](https://bugzilla.redhat.com/show_bug.cgi?id=1985735): [ON-PREM] HAProxy - enable listening sockets retrieval from old processes [#2691](https://github.com/openshift/machine-config-operator/pull/2691)
* [Bug 1998106](https://bugzilla.redhat.com/show_bug.cgi?id=1998106): vSpehere: disable vmxnet3 tx csum offload [#2736](https://github.com/openshift/machine-config-operator/pull/2736)
* [Bug 1995809](https://bugzilla.redhat.com/show_bug.cgi?id=1995809): crio: complete crio default config [#2724](https://github.com/openshift/machine-config-operator/pull/2724)
* [Bug 1993385](https://bugzilla.redhat.com/show_bug.cgi?id=1993385): crio: use conmon from path [#2714](https://github.com/openshift/machine-config-operator/pull/2714)
* [Bug 1975078](https://bugzilla.redhat.com/show_bug.cgi?id=1975078): Gracefully shutdown taking around 6-7 mins (libvirt provider) [#2636](https://github.com/openshift/machine-config-operator/pull/2636)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/d0db13627e8b48f7021cd4a44d964c55f15b65e1...58e73629d83330deae8b829b890b004de22b836b)


### [mdns-publisher](https://github.com/openshift/mdns-publisher/tree/1c707a28e88b42780fb37fad4532be7220acd1c5)

* [Bug 1988145](https://bugzilla.redhat.com/show_bug.cgi?id=1988145): Update zeroconf vendoring [#35](https://github.com/openshift/mdns-publisher/pull/35)
* [Full changelog](https://github.com/openshift/mdns-publisher/compare/2c42cc4d95ef276b81cd78d9509e2dc34f3713c1...1c707a28e88b42780fb37fad4532be7220acd1c5)


### [multus-cni](https://github.com/openshift/multus-cni/tree/73d0cfedfff518269f7184615e120afc1406a466)

* Updating multus-cni builder & base images to be consistent with ART [#95](https://github.com/openshift/multus-cni/pull/95)
* [Full changelog](https://github.com/openshift/multus-cni/compare/0c972341809c1e40f9ea6e1545774d9e1f580455...73d0cfedfff518269f7184615e120afc1406a466)


### [multus-route-override-cni](https://github.com/openshift/route-override-cni/tree/64807ab77cf97eb69d4202f25840e921290b3e12)

* Updating ose-multus-route-override-cni builder & base images to be consistent with ART [#12](https://github.com/openshift/route-override-cni/pull/12)
* [Full changelog](https://github.com/openshift/route-override-cni/compare/1662c3ec79b880fce5cd9c4e64f5ba0d4daffc00...64807ab77cf97eb69d4202f25840e921290b3e12)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/d743a20fc84059e96b5f88ec4ce00073d0564fd1)

* [Bug 2028966](https://bugzilla.redhat.com/show_bug.cgi?id=2028966): Whereabouts should reconcile IP addresses [backport 4.8] [#78](https://github.com/openshift/whereabouts-cni/pull/78)
* [Bug 2009497](https://bugzilla.redhat.com/show_bug.cgi?id=2009497): Release on cancel, sync for 4.8 [#70](https://github.com/openshift/whereabouts-cni/pull/70)
* [Bug 1990113](https://bugzilla.redhat.com/show_bug.cgi?id=1990113): Syncs with upstream for leader election [backport 4.8] [#63](https://github.com/openshift/whereabouts-cni/pull/63)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/9a05258711b1b459c0b24293a6d8fa77c9e5d852...d743a20fc84059e96b5f88ec4ce00073d0564fd1)


### [must-gather](https://github.com/openshift/must-gather/tree/5f81377b92c181e9f3d140fd1124310459cc704f)

* [Bug 2057345](https://bugzilla.redhat.com/show_bug.cgi?id=2057345): Fix ovn-nbctl commands for ipv6 [#287](https://github.com/openshift/must-gather/pull/287)
* [Full changelog](https://github.com/openshift/must-gather/compare/515e0502a886f0d7e7e0125792251d5872cc503b...5f81377b92c181e9f3d140fd1124310459cc704f)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/961db5cc19f78cb73c628c5219a0c5a6dbde7a3e)

* [Bug 2043808](https://bugzilla.redhat.com/show_bug.cgi?id=2043808): IPs with leading zeros are still valid in the apiserver [#74](https://github.com/openshift/oauth-apiserver/pull/74)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/09435a5dd505b3b90eb7ce355ab41c8e4c1a349c...961db5cc19f78cb73c628c5219a0c5a6dbde7a3e)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/43d6128c799a32b8a0f47c3ddb54155951a7f743)

* [Bug 2043808](https://bugzilla.redhat.com/show_bug.cgi?id=2043808): IPs with leading zeros are still valid in the apiserver [#280](https://github.com/openshift/openshift-apiserver/pull/280)
* [Bug 2053223](https://bugzilla.redhat.com/show_bug.cgi?id=2053223): Fix importing images that have dots in their namespace [#283](https://github.com/openshift/openshift-apiserver/pull/283)
* [Bug 2042732](https://bugzilla.redhat.com/show_bug.cgi?id=2042732): Make OriginImageMutators aware of origin objects [#271](https://github.com/openshift/openshift-apiserver/pull/271)
* [Bug 2020644](https://bugzilla.redhat.com/show_bug.cgi?id=2020644): Image policy should mutate DeploymentConfigs [#259](https://github.com/openshift/openshift-apiserver/pull/259)
* [Bug 1992639](https://bugzilla.redhat.com/show_bug.cgi?id=1992639): revert incorrect ssh scp fix [#241](https://github.com/openshift/openshift-apiserver/pull/241)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/394986946b6db0d21da5567973bb674aa138d74f...43d6128c799a32b8a0f47c3ddb54155951a7f743)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/69a83a3f3c290519692a66fd5ffe89586eb1b4b9)

* [Bug 2006793](https://bugzilla.redhat.com/show_bug.cgi?id=2006793): BC ICT still must check spec last triggered image ID in case BC was last processed when cluster was pre 4.8 [#206](https://github.com/openshift/openshift-controller-manager/pull/206)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/2e25328c64ac83e6f25449a6a2507c145352abc9...69a83a3f3c290519692a66fd5ffe89586eb1b4b9)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/d431a72bce1aa5ce8d1e5cf7ba810ccaabacb5bb)

* [Bug 2049088](https://bugzilla.redhat.com/show_bug.cgi?id=2049088): Explicitly set default value for ReclaimPolicy [#71](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/71)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/1184ace0cd3b6fd90549eaf77737f230822c318d...d431a72bce1aa5ce8d1e5cf7ba810ccaabacb5bb)


### [openstack-machine-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/77840b9a431880b15ee05d4a3f327b7ff2a682e8)

* [Bug 2064634](https://bugzilla.redhat.com/show_bug.cgi?id=2064634): Ensure subnets belong to the queried network [#223](https://github.com/openshift/cluster-api-provider-openstack/pull/223)
* [Bug 2000542](https://bugzilla.redhat.com/show_bug.cgi?id=2000542): Adds Proxy to provider client http transport [#199](https://github.com/openshift/cluster-api-provider-openstack/pull/199)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/91b8f0716011b841ab99ac7003344e90812c4c02...77840b9a431880b15ee05d4a3f327b7ff2a682e8)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/9e9736d6b162b877da9de3b760b06eeeb52ccd18)

* [Bug 2074680](https://bugzilla.redhat.com/show_bug.cgi?id=2074680): Emit CSV metric on startup [#288](https://github.com/openshift/operator-framework-olm/pull/288)
* [Bug 2073963](https://bugzilla.redhat.com/show_bug.cgi?id=2073963): Fix a bug in deletion of webhook service for replacement [#281](https://github.com/openshift/operator-framework-olm/pull/281)
* [Bug 2030489](https://bugzilla.redhat.com/show_bug.cgi?id=2030489): Remove oudated subscription update logic to improve resolution delay [#222](https://github.com/openshift/operator-framework-olm/pull/222)
* [Bug 1996162](https://bugzilla.redhat.com/show_bug.cgi?id=1996162): Check for pruned bundles on add in replaces mode [#165](https://github.com/openshift/operator-framework-olm/pull/165)
* [Bug 1986476](https://bugzilla.redhat.com/show_bug.cgi?id=1986476): resolver: remove legacy support for fallback parsing of CSVs [#140](https://github.com/openshift/operator-framework-olm/pull/140)
* [Bug 1994038](https://bugzilla.redhat.com/show_bug.cgi?id=1994038): clarify maxOpenShiftVersion upgrade error message [#173](https://github.com/openshift/operator-framework-olm/pull/173)
* [Bug 1994038](https://bugzilla.redhat.com/show_bug.cgi?id=1994038): Update kubebuilder installation in the build root dockerfile [#174](https://github.com/openshift/operator-framework-olm/pull/174)
* [Bug 1994110](https://bugzilla.redhat.com/show_bug.cgi?id=1994110): fix(openshift): drop z from next calculated y-stream [#167](https://github.com/openshift/operator-framework-olm/pull/167)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/2ab4171de3930b89b6b186724c29bffcf6f39ce2...9e9736d6b162b877da9de3b760b06eeeb52ccd18)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/3f3d7d1f9e914aff08d2ca2b5663358c8b611656)

* [Bug 1998938](https://bugzilla.redhat.com/show_bug.cgi?id=1998938): Use client-go's leader election implementation [#421](https://github.com/operator-framework/operator-marketplace/pull/421)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/32b0052b1ecd89db4088c1aa7b47ac0b3dfd38f2...3f3d7d1f9e914aff08d2ca2b5663358c8b611656)


### [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver/tree/c57863f25ec68b34f3928e02b9b750cfcef3c99c)

* [Bug 2013945](https://bugzilla.redhat.com/show_bug.cgi?id=2013945): pvc stuck on pending status when using preallocated storage domain [#89](https://github.com/openshift/ovirt-csi-driver/pull/89)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver/compare/c0b1ec3222eb9ddabdc44200d7270898ea48eef5...c57863f25ec68b34f3928e02b9b750cfcef3c99c)


### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/3bab77baee7a006b7a96bea737828979d77cda9d)

* [Bug 2062745](https://bugzilla.redhat.com/show_bug.cgi?id=2062745): Increase timeouts for CSI driver [#90](https://github.com/openshift/ovirt-csi-driver-operator/pull/90)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/7b6cd3d847c807663f63a6f293748c682c2cad2a...3bab77baee7a006b7a96bea737828979d77cda9d)


### [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt/tree/368223b8507596055a33b731a7942aab82f59ce0)

* [Bug 2046356](https://bugzilla.redhat.com/show_bug.cgi?id=2046356): detach non-bootable disks before removing the VM [#127](https://github.com/openshift/cluster-api-provider-ovirt/pull/127)
* [Bug 1989676](https://bugzilla.redhat.com/show_bug.cgi?id=1989676): correct IPAddress detection for OVNKubernetes [#116](https://github.com/openshift/cluster-api-provider-ovirt/pull/116)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ovirt/compare/b6eaef62a476bd6275b51f353e5d5f5c18b398a2...368223b8507596055a33b731a7942aab82f59ce0)


### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/f91171b4456cf881313b11aab9b9bebf6c915ae3)

* [Bug 2070762](https://bugzilla.redhat.com/show_bug.cgi?id=2070762): [release-4.8] Multiple ExGW cache validation/improvements [#1019](https://github.com/openshift/ovn-kubernetes/pull/1019)
* [Bug 2077370](https://bugzilla.redhat.com/show_bug.cgi?id=2077370): [release-4.8] fix ipv6 network policy [#1047](https://github.com/openshift/ovn-kubernetes/pull/1047)
* [Bug 2062842](https://bugzilla.redhat.com/show_bug.cgi?id=2062842): [4.8z] After reboot egress node, lr-policy-list was not correct, some duplicate records or missed internal IPs [#1009](https://github.com/openshift/ovn-kubernetes/pull/1009)
* [Bug 2065303](https://bugzilla.redhat.com/show_bug.cgi?id=2065303): [CARRY][Downstream-only] Give warning when ipFamilyPolicy implicitly set [#998](https://github.com/openshift/ovn-kubernetes/pull/998)
* [Bug 2070521](https://bugzilla.redhat.com/show_bug.cgi?id=2070521): egressgw: fix deadlock due to behavior of RWLock [#1018](https://github.com/openshift/ovn-kubernetes/pull/1018)
* [Bug 2063836](https://bugzilla.redhat.com/show_bug.cgi?id=2063836): backport 2052975 to 4.8 [#997](https://github.com/openshift/ovn-kubernetes/pull/997)
* [Bug 2068509](https://bugzilla.redhat.com/show_bug.cgi?id=2068509): EgressGW: only return unique elements from getRouteInfosForGateway() [#1011](https://github.com/openshift/ovn-kubernetes/pull/1011)
* [Bug 2065311](https://bugzilla.redhat.com/show_bug.cgi?id=2065311): [release-4.8] Network Policy fixes [#999](https://github.com/openshift/ovn-kubernetes/pull/999)
* [Bug 2057557](https://bugzilla.redhat.com/show_bug.cgi?id=2057557): Create iptables NAT rules also for loadbalancer services [#967](https://github.com/openshift/ovn-kubernetes/pull/967)
* [Bug 2058679](https://bugzilla.redhat.com/show_bug.cgi?id=2058679): Bumps ovn2.13-20.12.0-195.el8fdp [#979](https://github.com/openshift/ovn-kubernetes/pull/979)
* [release 4.8] Update project owners [#992](https://github.com/openshift/ovn-kubernetes/pull/992)
* [Bug 2057931](https://bugzilla.redhat.com/show_bug.cgi?id=2057931): Fix podHandlerCache key [#969](https://github.com/openshift/ovn-kubernetes/pull/969)
* [Bug 2057152](https://bugzilla.redhat.com/show_bug.cgi?id=2057152): Fix egress IP allocator sync [#965](https://github.com/openshift/ovn-kubernetes/pull/965)
* [Bug 2053611](https://bugzilla.redhat.com/show_bug.cgi?id=2053611): Lock the reassignment procedure during node deletion to avoid races [#970](https://github.com/openshift/ovn-kubernetes/pull/970)
* [Bug 2054225](https://bugzilla.redhat.com/show_bug.cgi?id=2054225): Fix gateway routers answer ARP/NDP requests for LoadBalancer/ExternalIP services [#957](https://github.com/openshift/ovn-kubernetes/pull/957)
* [Bug 2056975](https://bugzilla.redhat.com/show_bug.cgi?id=2056975): Don't return err when annotation cannot be unmarshalled [#963](https://github.com/openshift/ovn-kubernetes/pull/963)
* [Bug 2052966](https://bugzilla.redhat.com/show_bug.cgi?id=2052966): [release-4.8] bump ovn to 20.12.0-193 [#949](https://github.com/openshift/ovn-kubernetes/pull/949)
* [Bug 2043757](https://bugzilla.redhat.com/show_bug.cgi?id=2043757): Fix node connectivity to service backed by egress IP pods [#922](https://github.com/openshift/ovn-kubernetes/pull/922)
* [Bug 2042516](https://bugzilla.redhat.com/show_bug.cgi?id=2042516): Fixes for shared to local gateway migration [#916](https://github.com/openshift/ovn-kubernetes/pull/916)
* [Bug 2037884](https://bugzilla.redhat.com/show_bug.cgi?id=2037884): [4.8-backport] Fix nepol statefulset 4.8 [#894](https://github.com/openshift/ovn-kubernetes/pull/894)
* [Bug 2041767](https://bugzilla.redhat.com/show_bug.cgi?id=2041767): Fix pod handlers and pod IP parsing for egress IP [#912](https://github.com/openshift/ovn-kubernetes/pull/912)
* [Bug 2039279](https://bugzilla.redhat.com/show_bug.cgi?id=2039279): filter out KubeAPIAuth when logging CNI requests [#897](https://github.com/openshift/ovn-kubernetes/pull/897)
* [Bug 2021221](https://bugzilla.redhat.com/show_bug.cgi?id=2021221): Add ovn-controller logical flow cache options [#890](https://github.com/openshift/ovn-kubernetes/pull/890)
* [Bug 2030465](https://bugzilla.redhat.com/show_bug.cgi?id=2030465): Make config parsing more resilient for unknown fields [#868](https://github.com/openshift/ovn-kubernetes/pull/868)
* [Bug 2027873](https://bugzilla.redhat.com/show_bug.cgi?id=2027873): [4.8z] Fixes race between node handler and pod sync [#858](https://github.com/openshift/ovn-kubernetes/pull/858)
* [Bug 2027487](https://bugzilla.redhat.com/show_bug.cgi?id=2027487): [4.8z] addressManager should not call sync() from ErrorCallback [#853](https://github.com/openshift/ovn-kubernetes/pull/853)
* [Bug 2022043](https://bugzilla.redhat.com/show_bug.cgi?id=2022043): [4.8z] Avoid stale annotations by re-subscribing to netlink [#829](https://github.com/openshift/ovn-kubernetes/pull/829)
* [Bug 2014332](https://bugzilla.redhat.com/show_bug.cgi?id=2014332): [4.8z] Scale fixes for pods/exgws [#798](https://github.com/openshift/ovn-kubernetes/pull/798)
* [Bug 2011391](https://bugzilla.redhat.com/show_bug.cgi?id=2011391): [4.8] bump OVN to 20.12.0-183.el8fdp [#783](https://github.com/openshift/ovn-kubernetes/pull/783)
* [Bug 1986708](https://bugzilla.redhat.com/show_bug.cgi?id=1986708): Add routes for pod: fail only after checking all the gw addresses / ips [#774](https://github.com/openshift/ovn-kubernetes/pull/774)
* [Bug 2005480](https://bugzilla.redhat.com/show_bug.cgi?id=2005480): [4.8z] Remove waiting for namespace and namespace lock contention [#760](https://github.com/openshift/ovn-kubernetes/pull/760)
* [release 4.8] Bug 1994624: Infer subnet for node /128 IPv6 addresses [#661](https://github.com/openshift/ovn-kubernetes/pull/661)
* [Bug 2004336](https://bugzilla.redhat.com/show_bug.cgi?id=2004336): Ensure host interfaces are deleted by CNI [#745](https://github.com/openshift/ovn-kubernetes/pull/745)
* [Bug 2005464](https://bugzilla.redhat.com/show_bug.cgi?id=2005464): [4.8z] Fixes skipping pods accidentally in retry [#758](https://github.com/openshift/ovn-kubernetes/pull/758)
* [Bug 2005357](https://bugzilla.redhat.com/show_bug.cgi?id=2005357): [4.8z] Fixes misuse of pod annotations during update event [#753](https://github.com/openshift/ovn-kubernetes/pull/753)
* [Bug 1996739](https://bugzilla.redhat.com/show_bug.cgi?id=1996739): Fix ensurePod to call addPodExternalGW only for annotation updates [#752](https://github.com/openshift/ovn-kubernetes/pull/752)
* [Bug 2004488](https://bugzilla.redhat.com/show_bug.cgi?id=2004488): panic after EgressFirewall deletion and DNS record expiration [#749](https://github.com/openshift/ovn-kubernetes/pull/749)
* [Bug 2004269](https://bugzilla.redhat.com/show_bug.cgi?id=2004269): Sync ECMP routes on startup and fixes stale ECMP routes [#743](https://github.com/openshift/ovn-kubernetes/pull/743)
* [Bug 1999638](https://bugzilla.redhat.com/show_bug.cgi?id=1999638): Fix duplicate incrementing of subnet allocation metric [#700](https://github.com/openshift/ovn-kubernetes/pull/700)
* [Bug 1996729](https://bugzilla.redhat.com/show_bug.cgi?id=1996729): NetworkPolicy: bulk-add pods to new policies (or on restart) [#678](https://github.com/openshift/ovn-kubernetes/pull/678)
* [Bug 2000214](https://bugzilla.redhat.com/show_bug.cgi?id=2000214): Fix GetPortAddresses for HBO [#711](https://github.com/openshift/ovn-kubernetes/pull/711)
* [Bug 2001641](https://bugzilla.redhat.com/show_bug.cgi?id=2001641): egressfirewall not set after upgrade [#722](https://github.com/openshift/ovn-kubernetes/pull/722)
* [Bug 1996201](https://bugzilla.redhat.com/show_bug.cgi?id=1996201): Fixes cases of timed out while waiting for OVS port binding [#686](https://github.com/openshift/ovn-kubernetes/pull/686)
* [Bug 2001542](https://bugzilla.redhat.com/show_bug.cgi?id=2001542): fix reserve joinSwitch LRP IPs [#720](https://github.com/openshift/ovn-kubernetes/pull/720)
* [Bug 2001363](https://bugzilla.redhat.com/show_bug.cgi?id=2001363): [4.8z] Ensure client handling of canceled/dropped OVSDB monitor [#718](https://github.com/openshift/ovn-kubernetes/pull/718)
* [Bug 1999895](https://bugzilla.redhat.com/show_bug.cgi?id=1999895): Revert "[release-4.8] fix reserve joinSwitch LRP IPs" [#706](https://github.com/openshift/ovn-kubernetes/pull/706)
* [Bug 1996965](https://bugzilla.redhat.com/show_bug.cgi?id=1996965): Add quotes around nexthop and dst-ip fields [#680](https://github.com/openshift/ovn-kubernetes/pull/680)
* [Bug 1994937](https://bugzilla.redhat.com/show_bug.cgi?id=1994937): Fix: sync egress IP for missed events on start-up [#665](https://github.com/openshift/ovn-kubernetes/pull/665)
* [Bug 1997049](https://bugzilla.redhat.com/show_bug.cgi?id=1997049): fix reserve joinSwitch LRP IPs [#681](https://github.com/openshift/ovn-kubernetes/pull/681)
* [Bug 1985957](https://bugzilla.redhat.com/show_bug.cgi?id=1985957): Backport ovnkube-trace requires ip package to be installed to 4.8 [#656](https://github.com/openshift/ovn-kubernetes/pull/656)
* [Bug 1988487](https://bugzilla.redhat.com/show_bug.cgi?id=1988487): Fix lgw eip 4.8 [#636](https://github.com/openshift/ovn-kubernetes/pull/636)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/7da97fcfffb1770d980a85b5667b78d5c7f67c95...f91171b4456cf881313b11aab9b9bebf6c915ae3)


### [prometheus-config-reloader, prometheus-operator](https://github.com/openshift/prometheus-operator/tree/8f4efab9e7fa34f79a5900d95113f62908889168)

* [Bug 1979575](https://bugzilla.redhat.com/show_bug.cgi?id=1979575): [4.8]: Add timeout to informers cache sync [#132](https://github.com/openshift/prometheus-operator/pull/132)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/9d679a145d5eabe58a86bce6cf0da72bd07dd026...8f4efab9e7fa34f79a5900d95113f62908889168)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/b66c45062dd1c4fc4ce7de2f587647522af60e11)

* Updating ose-service-ca-operator images to be consistent with ART [#177](https://github.com/openshift/service-ca-operator/pull/177)
* Update go version to 1.16 [#179](https://github.com/openshift/service-ca-operator/pull/179)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/bcc6df48bc48dff748481c5284d05e0c2066f4e6...b66c45062dd1c4fc4ce7de2f587647522af60e11)


### [telemeter](https://github.com/openshift/telemeter/tree/eabad556e8759422b85b2f27248c52626245f1ba)

* Updating telemeter builder & base images to be consistent with ART [#374](https://github.com/openshift/telemeter/pull/374)
* [Full changelog](https://github.com/openshift/telemeter/compare/d6ceb8a4e94f775510591974b2cdeb19819abda0...eabad556e8759422b85b2f27248c52626245f1ba)


### [tests](https://github.com/openshift/origin/tree/2eb86450ff251951d9aabda446cb4fd19e9e3b62)

* [Bug 1999288](https://bugzilla.redhat.com/show_bug.cgi?id=1999288): [release-4.8]: bump openshift/kubernetes to the latest [#26886](https://github.com/openshift/origin/pull/26886)
* [Bug 2038876](https://bugzilla.redhat.com/show_bug.cgi?id=2038876): [release-4.8] test: skip tests that won't work behind a proxy automatically [#26733](https://github.com/openshift/origin/pull/26733)
* [Bug 1984275](https://bugzilla.redhat.com/show_bug.cgi?id=1984275): Add renamed Prometheus test into skipped disconnected list [#26344](https://github.com/openshift/origin/pull/26344)
* [Bug 2033426](https://bugzilla.redhat.com/show_bug.cgi?id=2033426): test/e2e/upgrade/adminack: Poll gates for duration of update [#26704](https://github.com/openshift/origin/pull/26704)
* [Bug 2033379](https://bugzilla.redhat.com/show_bug.cgi?id=2033379): [release-4.8] remove perma-failing prometheus upgrade invariant [#26698](https://github.com/openshift/origin/pull/26698)
* [Bug 2027262](https://bugzilla.redhat.com/show_bug.cgi?id=2027262): Create new-project without updating kubeconfig [#26645](https://github.com/openshift/origin/pull/26645)
* [Bug 2028815](https://bugzilla.redhat.com/show_bug.cgi?id=2028815): Skipping Django Test until bug is fixed [#26665](https://github.com/openshift/origin/pull/26665)
* [Bug 2028021](https://bugzilla.redhat.com/show_bug.cgi?id=2028021): Bump update time limit 4.8 [#26657](https://github.com/openshift/origin/pull/26657)
* [Bug 1929650](https://bugzilla.redhat.com/show_bug.cgi?id=1929650): Increase OVN upgrade timeout by 15m [#26654](https://github.com/openshift/origin/pull/26654)
* [Bug 2025724](https://bugzilla.redhat.com/show_bug.cgi?id=2025724): Add admin ack Upgradeable condition gate test [#26635](https://github.com/openshift/origin/pull/26635)
* [Bug 2020644](https://bugzilla.redhat.com/show_bug.cgi?id=2020644): Add more tests for image policy [#26584](https://github.com/openshift/origin/pull/26584)
* [Bug 2019519](https://bugzilla.redhat.com/show_bug.cgi?id=2019519): Skip test 'clone repository using git:// protocol should clone using git:// if no proxy is configured' [#26562](https://github.com/openshift/origin/pull/26562)
* fix: add proxy support to OAuthServer tests [#26539](https://github.com/openshift/origin/pull/26539)
* [Bug 2008114](https://bugzilla.redhat.com/show_bug.cgi?id=2008114): Add role label to jenkins imagestream [#26503](https://github.com/openshift/origin/pull/26503)
* [Bug 2002552](https://bugzilla.redhat.com/show_bug.cgi?id=2002552): Retry kubeconfig checks, when kube-apiserver is temporarily unavailable [#26458](https://github.com/openshift/origin/pull/26458)
* [Bug 1989402](https://bugzilla.redhat.com/show_bug.cgi?id=1989402): Add tests required internet into Skipped:Disconnected list [#26369](https://github.com/openshift/origin/pull/26369)
* [Bug 1986259](https://bugzilla.redhat.com/show_bug.cgi?id=1986259): Enable TestEndpointAdmission test only for OpenShift SDN [#26351](https://github.com/openshift/origin/pull/26351)
* Re-enable cluster quota test [#26234](https://github.com/openshift/origin/pull/26234)
* [Full changelog](https://github.com/openshift/origin/compare/89b5077d8133aac738ade01df1dc604c35480f6d...2eb86450ff251951d9aabda446cb4fd19e9e3b62)


### [thanos](https://github.com/openshift/thanos/tree/f7c1227d2009f439d4200e305246659ebea299f8)

* [Bug 1994156](https://bugzilla.redhat.com/show_bug.cgi?id=1994156): dockerignore: remove vendor from ignored list [#70](https://github.com/openshift/thanos/pull/70)
* [Full changelog](https://github.com/openshift/thanos/compare/c358e963a7c2fad1a4de605a09f4af5e7d2d07f4...f7c1227d2009f439d4200e305246659ebea299f8)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/18cd9873078206f26d25ecf18893ba0864c0cf62)

* [Bug 2021620](https://bugzilla.redhat.com/show_bug.cgi?id=2021620): Close connection to vCenter API [#51](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/51)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/edbdd69cb34ced19b0cc0f3a180df56f1ca4899d...18cd9873078206f26d25ecf18893ba0864c0cf62)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/9ff996502f4cb87c89985cdaff346754d645b988)

* [Bug 2036967](https://bugzilla.redhat.com/show_bug.cgi?id=2036967): Deferred logout after checks are run [#68](https://github.com/openshift/vsphere-problem-detector/pull/68)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/c02283d6c979f4e63b76945951272b1cfd134c32...9ff996502f4cb87c89985cdaff346754d645b988)