# 4.9.47

Created: 2022-08-24 04:51:34 +0000 UTC

Image Digest: `sha256:b049b24c534fed3cdd80caf6ae37db84642b7e4923229f319eaefe4df23b9f77`

Promoted from registry.ci.openshift.org/ocp/release:4.9.0-0.nightly-2022-08-23-221814


## Changes from 4.9.18

### Components

* Kubernetes upgraded from 1.22.3 to 1.22.8
* Red Hat Enterprise Linux CoreOS upgraded from 49.84.202201212103-0 to 49.84.202208232006-0


### Rebuilt images without code change

* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [18d82a6d](https://github.com/openshift/cloud-provider-aws/commit/18d82a6d75252dcaed8356777e4883d8a2c9732a) `sha256:49b41c4c369fc623190e6cedc2c9a2d4187fdcaf1f7c9c292f485aa96834b090`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [37a13282](https://github.com/openshift/aws-pod-identity-webhook/commit/37a13282bc56887e72d463c24168df59d5971b2f) `sha256:a109b173ee7564d392083bb9e8a069d986d92a798203dbd715ecd1b07275d2da`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [c02678d8](https://github.com/openshift/cloud-provider-azure/commit/c02678d890edd540de604d297d363883cc65ce68) `sha256:9dcb63b77cbe7ec1d561fb0b1b5e85535d58bc1ccbf0307bfe541281d8cae944`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [c02678d8](https://github.com/openshift/cloud-provider-azure/commit/c02678d890edd540de604d297d363883cc65ce68) `sha256:4ccec98e6579c49aeb4deb7571d82a1fae961a00c3ad676d9cda51c269cd7121`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [ade73731](https://github.com/openshift/azure-disk-csi-driver/commit/ade737312a66074a55c8a216af3c1bfac23337fb) `sha256:c54e829ed0022bf7db53673f69af784989acf332faa73b052174bd783e143b4c`
* [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator) git [15e474ce](https://github.com/openshift/azure-disk-csi-driver-operator/commit/15e474ce3bce9ce219fdd85ceb42620c18d9f817) `sha256:7a8e21fc2924aef1165d9db84c5dfcac0f1ba65fcca11d85b7adfd84e16f193b`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [1c81cab6](https://github.com/openshift/cluster-api-provider-baremetal/commit/1c81cab6cc3a166f9b42ffc59c0870c92739229e) `sha256:0d4abde6aee328b51179a21a46289bf7ca894056c5d3d7c709d5111bf81775ba`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [7e074a7d](https://github.com/openshift/cluster-bootstrap/commit/7e074a7d562882d1aeeef071a428d6d4b94cf2d2) `sha256:895cc42f042f3520509a25b4f2376144ef833fb31ad73b92eca1ef3d38779a1c`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [c750d4b4](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/c750d4b49aa1b1d4d24a6b7d0e5a6f14808f102e) `sha256:75b9c220c81d95ed189a07814332742d5ba5ca8d943de79e002214492ac455c9`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [eedd0dc7](https://github.com/openshift/cluster-dns-operator/commit/eedd0dc7f53166dcb69e218fa92d66693d021225) `sha256:c32026ce39484c9359b59b86982593a81ab3fce6fbe6fb666278a51be604c4b0`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [7245b0f0](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/7245b0f0b365f26b210a2f5c23256abb756a2f07) `sha256:5288371be6c3451f81922957fd75a4a29ee5e2e7977a2aa91cf1c0ed65691706`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [993ec9fe](https://github.com/openshift/cluster-machine-approver/commit/993ec9fe8eae4f07eb01a42ebecf606ba0ad3f97) `sha256:86c841c6e93e63d0ec631142a263e590daedff5c7abb89f94d470b7af238fdcc`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [3015cb84](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/3015cb846aba96102c625f9a694f2dfccb85eb27) `sha256:35ccb0000c12407e8c159089af56614e3d2738c37e34aa4ee2e7228aa5a17943`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [8fbffaf2](https://github.com/openshift/cluster-policy-controller/commit/8fbffaf2b3c7f30145b316c7e34da54747b3e634) `sha256:751389f35af81de71cd1e3fd8cc6766f93545555b69f1be213d2deb854b2b5a6`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [9b0a9d76](https://github.com/openshift/cluster-samples-operator/commit/9b0a9d769ef38f9f56a8b1a7900e458b526523a8) `sha256:0ebd4a30b00a182fdeb9c2b6a6069ea64b115aadef8ffe1c2cf2fd67c3cafb69`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [b84b5bf9](https://github.com/openshift/configmap-reload/commit/b84b5bf9c3b84e65ebead7e9e35ddf6454bb33ce) `sha256:3599b20d506aa9d00866157f101e9af5af3c46a43a2e0c9e58f9745c93d5b220`
* [coredns](https://github.com/openshift/coredns) git [3cb11c07](https://github.com/openshift/coredns/commit/3cb11c075c7689a2178a03a5d22c5adff3efbd4d) `sha256:7dcd64102bd02ff08eed136b93802d1d2423214a606ea02cd5d17214aa6853c2`
* [csi-driver-manila](https://github.com/openshift/cloud-provider-openstack) git [ddbc0e4f](https://github.com/openshift/cloud-provider-openstack/commit/ddbc0e4f24a6a5f9bb0f75d15a95fd778ee587e5) `sha256:a968d749f4e0e1438778d9eaf19fe2ab7178a4700d755203f5980d85fb38f5dc`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [0e0c1739](https://github.com/openshift/csi-driver-nfs/commit/0e0c1739332fee06dfc982b1b05d06005a3ddbee) `sha256:c95b5427a8c46d9b42a4c3f07921eeab7b8b9d714f7e45cb110823cfa7f86048`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [0a1737c4](https://github.com/openshift/csi-external-attacher/commit/0a1737c455fe68bdf0480de79e0aa8585e6dc503) `sha256:1e96f1b7f58b6b10b30c21ddd9766a8ad4ed3bb1a525a06d468ba6f264e8816b`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [7736e729](https://github.com/openshift/csi-external-provisioner/commit/7736e7293ea4cdba858f70fa1d59894dde6bd2bb) `sha256:c400b580970b191619678049c11f1f585d63e3ac75937cdde813b154b55c62ac`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [dad46d03](https://github.com/openshift/csi-external-resizer/commit/dad46d03bda869cf9b8ccff0087fb827906bc288) `sha256:6f6563f4f4ddece23a584ddaf9a7db4384c706285e6a64fdf71a2a0f76d350df`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [52ab8938](https://github.com/openshift/csi-external-snapshotter/commit/52ab8938fe0a1ea3cb666ebd0c6f7b46db5cb0de) `sha256:d7e5c26ce96195aceb2de6d4cf52f033219da54c1a025ad463bade5697e9677e`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [c13c3a5f](https://github.com/openshift/csi-livenessprobe/commit/c13c3a5f6292e10522700b0f911acebeea3c6f8c) `sha256:e77e9d0fcb7a5c6dd6846f7314035560b5b292ea78833d712322b3dc39e1e6f7`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [3e02b07e](https://github.com/openshift/csi-node-driver-registrar/commit/3e02b07e70fe306e841b563d3ca8edb0def5fe7f) `sha256:353716973a732937da3130a3e5d75e6f56fd48cb9b0162341f9e23042c172da0`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [52ab8938](https://github.com/openshift/csi-external-snapshotter/commit/52ab8938fe0a1ea3cb666ebd0c6f7b46db5cb0de) `sha256:e7b8f9778f6360785545c62d08803393a18ff9ad7ffdef4fdaf96176bffb29e9`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [52ab8938](https://github.com/openshift/csi-external-snapshotter/commit/52ab8938fe0a1ea3cb666ebd0c6f7b46db5cb0de) `sha256:4d87abf8c0c55c2fb5838a2017ff6e29c74a016f092f3d5adb46ebe5106e779c`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [51a2f1ef](https://github.com/openshift/driver-toolkit/commit/51a2f1efedf655d2454efba18c68262532792b14) `sha256:b79f54917c877118d7265a5acb387cc04479f8ab945865edcfdcd82f6b8933fc`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [099b7569](https://github.com/openshift/egress-router-cni/commit/099b75697f58443e87d3d88e9d6f5c426475ccea) `sha256:2462d32b23aa4cab3b7a59277f52a5ca8b6ac1f683355bbb7a4e71e62c143617`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [48d49f7f](https://github.com/openshift/gcp-pd-csi-driver/commit/48d49f7f9ef96a7a42a789e3304ead53f266f475) `sha256:838d2bfede9c218d0432745a1ae92110d7e678c92d054a21111708fdc65ba41f`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [d8a891de](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/d8a891de5ae9cf552d7d012ebe61c2abd395386e) `sha256:02e1fe709e6eeae0415db140c336f97e149afd6cb684f623d15b6ad94eb771d8`
* [grafana](https://github.com/openshift/grafana) git [6130ba8b](https://github.com/openshift/grafana/commit/6130ba8b4c4b66e7779bec26c74b1fefbb2e21ab) `sha256:d584defd7df0dbc2b08028e6924e26bf581ff29fe48adf0f7e65d36648e51edd`
* [ironic-hardware-inventory-recorder](https://github.com/openshift/ironic-hardware-inventory-recorder-image) git [8e2d1db6](https://github.com/openshift/ironic-hardware-inventory-recorder-image/commit/8e2d1db6f2c66128c3b5682e60cdaaee786d992f) `sha256:2d9e4bcf2e59bb13e032211e7d5a8cf7412c48517f05a3aa5721f2215879db3b`
* [ironic-inspector](https://github.com/openshift/ironic-inspector-image) git [9474b758](https://github.com/openshift/ironic-inspector-image/commit/9474b75871108ba4b4855c9b46e3b1ce4aae1342) `sha256:544441f4b872ddecbec9011e4677d70d51761da13405d6c97e6ee95537ead2f8`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [90b57223](https://github.com/openshift/ironic-rhcos-downloader/commit/90b57223200ffcf5ad31b41700815779fc81afac) `sha256:53b33f802275fed86db2ca95fe0b6544b5f329f2ce78e8a08e0c212c8cdfe2f5`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [d13dccb8](https://github.com/openshift/ironic-static-ip-manager/commit/d13dccb8d419159efdd7a63428f7820e346b0395) `sha256:2e1c5b94f7ff94e2a2e7fbd8711201d78ee84846fb3515f6315764a22ab3a3fb`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [58e09297](https://github.com/openshift/kube-rbac-proxy/commit/58e09297223ca912cba8b369bfad150b0fc04a9f) `sha256:94aa9386cec03a785776cffa74751761d7d13260be566d7d72911b97fcd273d5`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [6e41dbd4](https://github.com/openshift/kube-state-metrics/commit/6e41dbd42c8f38d6960f5e837d9e64fbd5e8d3ef) `sha256:020e4111595d7f653f94691aa7edf08d54a994e9068fe337ac39623df9dc7690`
* [kuryr-cni](https://github.com/openshift/kuryr-kubernetes) git [1e8c94f8](https://github.com/openshift/kuryr-kubernetes/commit/1e8c94f80e26b69968a3d8ea918a387451e9db2b) `sha256:570134f56e57d177c12942fb5a6fcf84302c0f10e770920516630f91d30279e7`
* [kuryr-controller](https://github.com/openshift/kuryr-kubernetes) git [1e8c94f8](https://github.com/openshift/kuryr-kubernetes/commit/1e8c94f80e26b69968a3d8ea918a387451e9db2b) `sha256:91b9491bf4d0eadafcc0776772511385d94c92cdc7755fe073ff5f4e0d1121fa`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [59ae2edf](https://github.com/openshift/cluster-api-provider-libvirt/commit/59ae2edf88755f915b7d76d78a8934ee17487ad6) `sha256:ec040aaec15b64f20faa990864d4bbe7805d32046b4efd6afbe66eea3e54dfa1`
* machine-os-content `sha256:515d47c296034444c9c2c0c5f960a40fef0d165e182a4a4ca06a147dae203d21`
* [mdns-publisher](https://github.com/openshift/mdns-publisher) git [266597b3](https://github.com/openshift/mdns-publisher/commit/266597b3c75fcbaf6441ef4acd1f235f74a0f305) `sha256:21dd4d23c9033774cdc80c990a24af6a5e64b6540a6090f1cec5e7133deeb9bf`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [3c28a57a](https://github.com/openshift/multus-admission-controller/commit/3c28a57a831d11380e612a616820bf8a42261d9d) `sha256:adaf3ce72f7d24a73ed2c50adf5db4036a058c245675e399921333a9c067a4c4`
* [multus-cni](https://github.com/openshift/multus-cni) git [c2499377](https://github.com/openshift/multus-cni/commit/c2499377b6fb43320618025876eb5b9751006222) `sha256:212518da0837d4073cd644f501d2d434101ee6559ae21ce9b7ebef386eb92c75`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [fd12fede](https://github.com/openshift/multus-networkpolicy/commit/fd12fedeb9e05637279386aa2aacd443ac1c0da7) `sha256:40a0955020e7e2c32b2f7530197f5c58a4dd855a981a7e830478b16ad405aa74`
* [network-tools](https://github.com/openshift/network-tools) git [ed0b846c](https://github.com/openshift/network-tools/commit/ed0b846c056056848f0ab7741bd3f1254e1862d6) `sha256:d26644791ed5bef4892897b1da1161ee109a882d5106458bdf297aaf6e5969ae`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [9ea1ebc8](https://github.com/openshift/oauth-proxy/commit/9ea1ebc89f721d3cd929f58c7ab9ed4273d3c493) `sha256:65317c4c01e4f2d7aba27ad1b00328d179c9cbc303e6fb788f9fddb9d04227ef`
* [oauth-server](https://github.com/openshift/oauth-server) git [1ee9925b](https://github.com/openshift/oauth-server/commit/1ee9925b84316939493a788a75ab16ddf1e301e0) `sha256:ee89ac7113580cfc5eb221169c94a390a7aece5dffa3b723f742593479573015`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [79857a32](https://github.com/openshift/openshift-controller-manager/commit/79857a326b7f77c589c6fd1d428a72c0f8faeffc) `sha256:9a69024eecc55c612d20dfdba706c2c4ba2dfc093db3fb2e069263a9eb57927f`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [689af8b8](https://github.com/openshift/openshift-state-metrics/commit/689af8b8dcb57484dc0c6428a3e8c9d73ef294a2) `sha256:1f5658863eefdfbbba398ef15f49037a42cd0aca689a7bcdf22282a4d158fa5d`
* [openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack) git [ddbc0e4f](https://github.com/openshift/cloud-provider-openstack/commit/ddbc0e4f24a6a5f9bb0f75d15a95fd778ee587e5) `sha256:a5bd7f04b0892ec5e10c9e2dac59727977d35744824456cd16803855252bd711`
* [openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack) git [ddbc0e4f](https://github.com/openshift/cloud-provider-openstack/commit/ddbc0e4f24a6a5f9bb0f75d15a95fd778ee587e5) `sha256:f06429e4980bb4b2b354ae1d7926203a57d5875bdf17b5aa9e06db8bdb133de1`
* [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [85947272](https://github.com/operator-framework/operator-marketplace/commit/859472720018b297885fdd4d8f61ae3fcb1c42aa) `sha256:c0f0c895de6293c53284360b0697232932d841f7baa1511a97e42ef8e5cc36e6`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [fe2a7fdf](https://github.com/openshift/ovirt-csi-driver/commit/fe2a7fdff88fda45076e73891f4b0c1a4395a54b) `sha256:1ffbee1cd524692ce379bf6f0d39bc44f147fc253b55915471ad01c6166eeabf`
* [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt) git [15a6add2](https://github.com/openshift/cluster-api-provider-ovirt/commit/15a6add2ff5b1858f5d1bc3944a352dcf0ee010f) `sha256:ac587774e49d3ca61fdffad3415cb1f8a93886e5a22a2eda21e46996f2d3c4d7`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [9f870bfa](https://github.com/openshift/prom-label-proxy/commit/9f870bfaceeffb88a662b2e2e384e34dd9721853) `sha256:02776b170346447258d3f67f243daa844f8fd4f3519d22697b4712c26779f3c2`
* [prometheus](https://github.com/openshift/prometheus) git [3197fa71](https://github.com/openshift/prometheus/commit/3197fa71f6b01d2acd8c354056b015d1c0a06f7d) `sha256:6a0b9dbcea9daa7dd537561e6e7cfd83def4299cd2aa7c8674a262c88b7deb73`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [579e3c68](https://github.com/openshift/prometheus-alertmanager/commit/579e3c6879bad1ac3a1c4f7146b21f907980dafd) `sha256:e749b7c80a0538cbe0af73aa80a0f868f2ad8010d45561205934abc237b8ed04`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [1ab97f35](https://github.com/openshift/node_exporter/commit/1ab97f35f07cf1ed02a2b4ea3f3c3c9d09bf94b5) `sha256:83bc9b1007e33544bcedb0491c05c2c215b18da1c944ece65925165bc91374ca`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [ab44f586](https://github.com/openshift/service-ca-operator/commit/ab44f586318864ed385dff5a59ea72b486afbe35) `sha256:c69e2b80c00b1d8e08f79ed4c84e76575c64a4a1b40f5668c259d4c350ebfa92`
* [telemeter](https://github.com/openshift/telemeter) git [03842e05](https://github.com/openshift/telemeter/commit/03842e05c3530786315e436522471667af86627e) `sha256:759e5fc59fd69691f6d70ff6fae034be55bb3b5db1cd96183f5f0d4a9d653935`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [4ece3d1b](https://github.com/openshift/vmware-vsphere-csi-driver/commit/4ece3d1b07cc0e25abe028c7190ae9ad70cb87ee) `sha256:4829ba8b70b9fb8141d95f29b75691be5fff5ce626537c14af1f80c14246d5c5`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [9f56afd3](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/9f56afd3450b385ef300d9783f028179161efe32) `sha256:3cb49625e180d80a30ac23d41ecebdb8f82f77d5d5d7902dc7d58b4cfa5cde38`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [4ece3d1b](https://github.com/openshift/vmware-vsphere-csi-driver/commit/4ece3d1b07cc0e25abe028c7190ae9ad70cb87ee) `sha256:a713b8c273aa2d1a96008427ca8f730de480ba0a0b4ce57e636c9da1207a5667`


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/7f60c7858f620f2a2a0f42553fc5e3facd655c6f)

* [Bug 2103982](https://bugzilla.redhat.com/show_bug.cgi?id=2103982): Fix build on ARM after rebase [#204](https://github.com/openshift/aws-ebs-csi-driver/pull/204)
* [Bug 2103982](https://bugzilla.redhat.com/show_bug.cgi?id=2103982): Rebase to v1.4.0 [#203](https://github.com/openshift/aws-ebs-csi-driver/pull/203)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/26f1b6f4471d0127fa1ed3129d412e22ab788086...7f60c7858f620f2a2a0f42553fc5e3facd655c6f)


### [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator/tree/3bea487dc9f5568bef18af28f7f9f4595888cbdf)

* [Bug 2077897](https://bugzilla.redhat.com/show_bug.cgi?id=2077897): Set custom endpoint environment variable if available [#155](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/155)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver-operator/compare/e8e2cb3682ba7c4796cb2cd7235cb0284548a55a...3bea487dc9f5568bef18af28f7f9f4595888cbdf)


### [aws-machine-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/d8e1fdd62b9592020717c8baaf122fe58710df36)

* [Bug 2111004](https://bugzilla.redhat.com/show_bug.cgi?id=2111004): Validate unknown regions using AWS API [#441](https://github.com/openshift/cluster-api-provider-aws/pull/441)
* [Bug 2065483](https://bugzilla.redhat.com/show_bug.cgi?id=2065483): Ensure IOPS setting is honoured on all supported block device types [#436](https://github.com/openshift/cluster-api-provider-aws/pull/436)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/8226e86fa06e84e9959ce0297569dfd8ce80c302...d8e1fdd62b9592020717c8baaf122fe58710df36)


### [azure-machine-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/3bf2b7ff289814b198feb0a56cb85967db18e9dc)

* [Bug 2047845](https://bugzilla.redhat.com/show_bug.cgi?id=2047845): Requeue create on invalid credentials errors [#249](https://github.com/openshift/cluster-api-provider-azure/pull/249)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/184ccedc799eaabdd0dc6511a8231ce01ddf35b1...3bf2b7ff289814b198feb0a56cb85967db18e9dc)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/8b46510118236f2d449f50193581518a7f0f54e7)

* [OCPBUGS-250](https://issues.redhat.com/browse/OCPBUGS-250): Allow setting bootstrap kubelet ip [#6240](https://github.com/openshift/installer/pull/6240)
* [Bug 2095320](https://bugzilla.redhat.com/show_bug.cgi?id=2095320): bump RHCOS 4.9 bootimage metadata [#6159](https://github.com/openshift/installer/pull/6159)
* [Bug 2009024](https://bugzilla.redhat.com/show_bug.cgi?id=2009024): Delete all the ports from tagged Neutron networks. [#6122](https://github.com/openshift/installer/pull/6122)
* [Bug 2098158](https://bugzilla.redhat.com/show_bug.cgi?id=2098158): Bootstrap timeout [#6025](https://github.com/openshift/installer/pull/6025)
* [Bug 2099741](https://bugzilla.redhat.com/show_bug.cgi?id=2099741): Collect whole journal and netstat data [#6036](https://github.com/openshift/installer/pull/6036)
* [Bug 2043298](https://bugzilla.redhat.com/show_bug.cgi?id=2043298): bump RHCOS 4.9 boot images [#5963](https://github.com/openshift/installer/pull/5963)
* [Bug 2087972](https://bugzilla.redhat.com/show_bug.cgi?id=2087972): Set rc-manager=unmanaged for on-prem bootstrap [#5926](https://github.com/openshift/installer/pull/5926)
* [Bug 2025862](https://bugzilla.redhat.com/show_bug.cgi?id=2025862): Improve host role management during assets creation [#5408](https://github.com/openshift/installer/pull/5408)
* [Bug 2067092](https://bugzilla.redhat.com/show_bug.cgi?id=2067092): stop considering Mint mode as supported on Azure (#5699) [#5738](https://github.com/openshift/installer/pull/5738)
* [Bug 2052307](https://bugzilla.redhat.com/show_bug.cgi?id=2052307): aws: Filter out local zones when generating a default list of zones [#5627](https://github.com/openshift/installer/pull/5627)
* [Bug 2042443](https://bugzilla.redhat.com/show_bug.cgi?id=2042443): openstack/Dockerfile: add make and gettext [#5549](https://github.com/openshift/installer/pull/5549)
* [Bug 2038429](https://bugzilla.redhat.com/show_bug.cgi?id=2038429): Azure: Update Default Instance Types [#5520](https://github.com/openshift/installer/pull/5520)
* [Bug 2043590](https://bugzilla.redhat.com/show_bug.cgi?id=2043590): vendor: bump aws terraform provider to v3.1.0-openshift-2 [#5559](https://github.com/openshift/installer/pull/5559)
* [Full changelog](https://github.com/openshift/installer/compare/eb132dae953888e736c382f1176c799c0e1aa49e...8b46510118236f2d449f50193581518a7f0f54e7)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/4e7605ba54b7f2875b750b24c32c411f00a5e573)

* [Bug 2100995](https://bugzilla.redhat.com/show_bug.cgi?id=2100995): Uplift kustomize to v4 to remove go-getter dependency [#235](https://github.com/openshift/baremetal-operator/pull/235)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/6e62a5464298ea49a2681f946d09adc863a6a3f8...4e7605ba54b7f2875b750b24c32c411f00a5e573)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/e3602f0966c0ffb6038c6075efdf1ae49537d63b)

* [Bug 2101794](https://bugzilla.redhat.com/show_bug.cgi?id=2101794): Avoid kubernetes node port range [#182](https://github.com/openshift/baremetal-runtimecfg/pull/182)
* [Bug 2026012](https://bugzilla.redhat.com/show_bug.cgi?id=2026012): Ignore VIPs in node-ip show [#161](https://github.com/openshift/baremetal-runtimecfg/pull/161)
* [Bug 2043650](https://bugzilla.redhat.com/show_bug.cgi?id=2043650): Avoid dynamically allocated port range for haproxy [#167](https://github.com/openshift/baremetal-runtimecfg/pull/167)
* [Bug 2049903](https://bugzilla.redhat.com/show_bug.cgi?id=2049903): Add delay after sending bootstrap stop and start messages [#169](https://github.com/openshift/baremetal-runtimecfg/pull/169)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/99cf2c85c5bb4c065dfc56053f01617215d4382b...e3602f0966c0ffb6038c6075efdf1ae49537d63b)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/b49c285c2a30f0dec38b83083e4aaac10dc902cc)

* [Bug 2103913](https://bugzilla.redhat.com/show_bug.cgi?id=2103913): [must-gather] Add options for multi-node, host-network capture [#1191](https://github.com/openshift/oc/pull/1191)
* [Bug 2103910](https://bugzilla.redhat.com/show_bug.cgi?id=2103910): Introduce an option to retrieve the rotated log files for a pod [#1190](https://github.com/openshift/oc/pull/1190)
* [Bug 2092265](https://bugzilla.redhat.com/show_bug.cgi?id=2092265): [inspect] Add namespace-scoped networking resources to inspect [#1157](https://github.com/openshift/oc/pull/1157)
* [Bug 2065174](https://bugzilla.redhat.com/show_bug.cgi?id=2065174): reuse SourceRepository.DetectAuth during argument classification for consistent interaction with private source repositories [#1089](https://github.com/openshift/oc/pull/1089)
* [Bug 2051944](https://bugzilla.redhat.com/show_bug.cgi?id=2051944): Enhancing the output provided when backup collections are attempted [#1057](https://github.com/openshift/oc/pull/1057)
* [Bug 2065302](https://bugzilla.redhat.com/show_bug.cgi?id=2065302): Add TMOUT env to debug node pod [#1090](https://github.com/openshift/oc/pull/1090)
* [Bug 2051626](https://bugzilla.redhat.com/show_bug.cgi?id=2051626): bump(k8s.io/*) v0.22.6 [#1060](https://github.com/openshift/oc/pull/1060)
* [Bug 2045008](https://bugzilla.redhat.com/show_bug.cgi?id=2045008): bump discovery burst [#1034](https://github.com/openshift/oc/pull/1034)
* [Bug 2053149](https://bugzilla.redhat.com/show_bug.cgi?id=2053149): Fix catalog mirror from files [#1064](https://github.com/openshift/oc/pull/1064)
* [Bug 2053222](https://bugzilla.redhat.com/show_bug.cgi?id=2053222): Fix mirroring images that have dots in their namespace [#1068](https://github.com/openshift/oc/pull/1068)
* [Bug 2039761](https://bugzilla.redhat.com/show_bug.cgi?id=2039761): Remove `git://` from new-app tests [#1022](https://github.com/openshift/oc/pull/1022)
* [Full changelog](https://github.com/openshift/oc/compare/3f16530f0bb938bef95b705f6d235e29a892b176...b49c285c2a30f0dec38b83083e4aaac10dc902cc)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/50172e2a8a8af16547a458a5727c1aaef1f76104)

* [Bug 2055821](https://bugzilla.redhat.com/show_bug.cgi?id=2055821): Remove Azure mint mode support as Active Directory Graph API will be sunset [#453](https://github.com/openshift/cloud-credential-operator/pull/453)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/d642d1125fa4f68415ad7562aab2efa8015cc251...50172e2a8a8af16547a458a5727c1aaef1f76104)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/265030f6ebe691184348d7eff7398dd3ff912a3e)

* [Bug 2107027](https://bugzilla.redhat.com/show_bug.cgi?id=2107027): only ever include certificates in the oauth-serving-cert CM [#578](https://github.com/openshift/cluster-authentication-operator/pull/578)
* [Bug 2037944](https://bugzilla.redhat.com/show_bug.cgi?id=2037944): endpoints checker: check only the custom hostname if configured [#531](https://github.com/openshift/cluster-authentication-operator/pull/531)
* [Bug 2052467](https://bugzilla.redhat.com/show_bug.cgi?id=2052467): Custom route HTTPS certificate SAN validation [#545](https://github.com/openshift/cluster-authentication-operator/pull/545)
* [Bug 2077483](https://bugzilla.redhat.com/show_bug.cgi?id=2077483): routeName used as customSecretName [#560](https://github.com/openshift/cluster-authentication-operator/pull/560)
* [Bug 2037274](https://bugzilla.redhat.com/show_bug.cgi?id=2037274): pkg/operator#LegacyCNCerts: use increase function [#544](https://github.com/openshift/cluster-authentication-operator/pull/544)
* [Bug 2062292](https://bugzilla.redhat.com/show_bug.cgi?id=2062292): e2e: Pin Keycloack to the legacy variant [#556](https://github.com/openshift/cluster-authentication-operator/pull/556)
* [Bug 2039417](https://bugzilla.redhat.com/show_bug.cgi?id=2039417): remove degraded condition 4.9 [#542](https://github.com/openshift/cluster-authentication-operator/pull/542)
* [Bug 2037274](https://bugzilla.redhat.com/show_bug.cgi?id=2037274): starter.go: add invalidCertsController [#535](https://github.com/openshift/cluster-authentication-operator/pull/535)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/92d084cff14e3c332b289462d801b425727f6d06...265030f6ebe691184348d7eff7398dd3ff912a3e)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/4a3ffb0fa518a1c8ffa4bdefcb630b3b242b7acc)

* [Bug 2108949](https://bugzilla.redhat.com/show_bug.cgi?id=2108949): Have VPA ignore phantom containers named "POD" [#237](https://github.com/openshift/kubernetes-autoscaler/pull/237)
* [Bug 2066270](https://bugzilla.redhat.com/show_bug.cgi?id=2066270): UPSTREAM: <carry>: Fallback to CAPI annotations [#226](https://github.com/openshift/kubernetes-autoscaler/pull/226)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/68fe93aa45e3080828c71c0d6e6e5da0384db012...4a3ffb0fa518a1c8ffa4bdefcb630b3b242b7acc)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/69a74410d6219d8fe9e75ff4b2afd092247fc5db)

* [Bug 2070277](https://bugzilla.redhat.com/show_bug.cgi?id=2070277): add leader election flags to autoscaler deployment [#244](https://github.com/openshift/cluster-autoscaler-operator/pull/244)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/bc20153a145fa8a2ee56c65d43186fc02df216d3...69a74410d6219d8fe9e75ff4b2afd092247fc5db)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/37616b3c2dfa435375719fb372515b2ac4dbc2a4)

* [Bug 2091747](https://bugzilla.redhat.com/show_bug.cgi?id=2091747): Fix interpretation of Deployment Status Conditions [#268](https://github.com/openshift/cluster-baremetal-operator/pull/268)
* [Bug 2053581](https://bugzilla.redhat.com/show_bug.cgi?id=2053581): Calculating network stack only on supported Platforms [#244](https://github.com/openshift/cluster-baremetal-operator/pull/244)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/10af6a966c2c1d8061f301d44ecec0ff05ccce26...37616b3c2dfa435375719fb372515b2ac4dbc2a4)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/3712f8e13ed5da00d02828ee2b051a56396d2cac)

* [Bug 2064837](https://bugzilla.redhat.com/show_bug.cgi?id=2064837): Fix CCCMO metric ports configuration [#180](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/180)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/1826b16051e893576a123e2528013e722f68ab4e...3712f8e13ed5da00d02828ee2b051a56396d2cac)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/a6176504a7f21871809cd898c7f11cb77fb8f0f1)

* [Bug 2075551](https://bugzilla.redhat.com/show_bug.cgi?id=2075551): [release-4.9] backport api to commit 019a246c52 [#252](https://github.com/openshift/cluster-config-operator/pull/252)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/184a51396e5927200ae3e00a5819b44c02e2fa7c...a6176504a7f21871809cd898c7f11cb77fb8f0f1)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/b9c70e1292423c4cfae1fe3a78f3dfb97b603c2f)

* [Bug 2102005](https://bugzilla.redhat.com/show_bug.cgi?id=2102005): Upping defrag timeout to 1 minute [#867](https://github.com/openshift/cluster-etcd-operator/pull/867)
* [Bug 2095115](https://bugzilla.redhat.com/show_bug.cgi?id=2095115): cluster-backup.sh script has a conflict to use the '/etc/kubernetes/static-pod-certs' folder if a custom API certificate is defined [#849](https://github.com/openshift/cluster-etcd-operator/pull/849)
* [Bug 2086119](https://bugzilla.redhat.com/show_bug.cgi?id=2086119): Add summary to etcd alert rules [#826](https://github.com/openshift/cluster-etcd-operator/pull/826)
* [Bug 2082316](https://bugzilla.redhat.com/show_bug.cgi?id=2082316): Add new etcd members to reviewers, add Allen to approvers [#818](https://github.com/openshift/cluster-etcd-operator/pull/818)
* [Bug 2068084](https://bugzilla.redhat.com/show_bug.cgi?id=2068084): manually disable defrag [#810](https://github.com/openshift/cluster-etcd-operator/pull/810)
* update OWNERS [#721](https://github.com/openshift/cluster-etcd-operator/pull/721)
* [Bug 2069830](https://bugzilla.redhat.com/show_bug.cgi?id=2069830): turn on initial corruption check [#772](https://github.com/openshift/cluster-etcd-operator/pull/772)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/19c4e72ede71df4b58c6165b1e2be45cc949090a...b9c70e1292423c4cfae1fe3a78f3dfb97b603c2f)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/a2f7f709182d333f21b7e9f430659591b2e2b575)

* [Bug 2074052](https://bugzilla.redhat.com/show_bug.cgi?id=2074052): Deployment annotations, runtimeClassName override and fs policy change [#766](https://github.com/openshift/cluster-image-registry-operator/pull/766)
* [Bug 2059606](https://bugzilla.redhat.com/show_bug.cgi?id=2059606): Retry on pruner failures [#757](https://github.com/openshift/cluster-image-registry-operator/pull/757)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/d886c13c0895747362a8d1eb4c2a57835ab413f4...a2f7f709182d333f21b7e9f430659591b2e2b575)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/a3a33962a412eafd0d33a9196bac7ad2128ea441)

* [Bug 2084336](https://bugzilla.redhat.com/show_bug.cgi?id=2084336): Fix enabling PROXY protocol on an upgraded cluster [#757](https://github.com/openshift/cluster-ingress-operator/pull/757)
* [Bug 2097736](https://bugzilla.redhat.com/show_bug.cgi?id=2097736): Fix loadBalancerServiceAnnotationsChanged check and update [#786](https://github.com/openshift/cluster-ingress-operator/pull/786)
* [Bug 2094054](https://bugzilla.redhat.com/show_bug.cgi?id=2094054): Delete LoadBalancer-type service finalizer logic [#771](https://github.com/openshift/cluster-ingress-operator/pull/771)
* [Bug 2079517](https://bugzilla.redhat.com/show_bug.cgi?id=2079517): Use externalTrafficPolicy: Cluster with OVN [#713](https://github.com/openshift/cluster-ingress-operator/pull/713)
* [Bug 2032677](https://bugzilla.redhat.com/show_bug.cgi?id=2032677): Azure: Add Support for Azure Stack Hub [#690](https://github.com/openshift/cluster-ingress-operator/pull/690)
* [Bug 2064586](https://bugzilla.redhat.com/show_bug.cgi?id=2064586): Disable keepalive for canary probe [#722](https://github.com/openshift/cluster-ingress-operator/pull/722)
* [Bug 2060111](https://bugzilla.redhat.com/show_bug.cgi?id=2060111): Set Upgradeable=False if default cert has no SAN [#711](https://github.com/openshift/cluster-ingress-operator/pull/711)
* [Bug 2057518](https://bugzilla.redhat.com/show_bug.cgi?id=2057518): Normalize the AWS internal LB annotation value [#706](https://github.com/openshift/cluster-ingress-operator/pull/706)
* [Bug 2058699](https://bugzilla.redhat.com/show_bug.cgi?id=2058699): Upgradeable Condition in Operator and IC status [#709](https://github.com/openshift/cluster-ingress-operator/pull/709)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/07c25a64d3834e46d5affa6e1ec49ea24cf8f1cc...a3a33962a412eafd0d33a9196bac7ad2128ea441)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/1982995fc03fe4b7d8c4d84339fe6d5db7461048)

* [Bug 2037274](https://bugzilla.redhat.com/show_bug.cgi?id=2037274): pkg/operator#LegacyCNCerts: use increase function [#1318](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1318)
* [Bug 2044622](https://bugzilla.redhat.com/show_bug.cgi?id=2044622): staticpod pruner: check if the cert directory exists to avoid panic [#1297](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1297)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/80970d5f3217d80eb8d00cadbfec6b5397b83094...1982995fc03fe4b7d8c4d84339fe6d5db7461048)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/78b8e48b3f4ed09037d71ea7a94582d1b2123fbd)

* [Bug 2049907](https://bugzilla.redhat.com/show_bug.cgi?id=2049907): allow cluster-policy-controller to fallback to default cert [#600](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/600)
* [Bug 2044622](https://bugzilla.redhat.com/show_bug.cgi?id=2044622): Sync with the latest 4.9 library-go [#593](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/593)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/7a83e1754338445c6b1ad6f5d3dcbb28fda83ff1...78b8e48b3f4ed09037d71ea7a94582d1b2123fbd)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/0cfc646b647b19f8496334407420373bffbcd770)

* [Bug 2026109](https://bugzilla.redhat.com/show_bug.cgi?id=2026109): Disable balancedAllocation and add weight for HighNodeUtilization profile [#379](https://github.com/openshift/cluster-kube-scheduler-operator/pull/379)
* [Bug 2044622](https://bugzilla.redhat.com/show_bug.cgi?id=2044622): Sync with the latest 4.9 library-go [#405](https://github.com/openshift/cluster-kube-scheduler-operator/pull/405)
* [Bug 2037665](https://bugzilla.redhat.com/show_bug.cgi?id=2037665): Check policy name field independently of the configmap change [#403](https://github.com/openshift/cluster-kube-scheduler-operator/pull/403)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/6187d82d24042844c9de1e34ee38aa9e5260e743...0cfc646b647b19f8496334407420373bffbcd770)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/48d00c8e133fe96ddf480e438c1c497c2f211f77)

* [Bug 2030630](https://bugzilla.redhat.com/show_bug.cgi?id=2030630): jsonnet: update kube-prometheus and kubernetes-mixin [#1538](https://github.com/openshift/cluster-monitoring-operator/pull/1538)
* [Bug 2059470](https://bugzilla.redhat.com/show_bug.cgi?id=2059470): Unable to connect external Grafana with Openshift Monitoring [#1549](https://github.com/openshift/cluster-monitoring-operator/pull/1549)
* [Bug 2038406](https://bugzilla.redhat.com/show_bug.cgi?id=2038406): Add custom profile metric for Node Tuning Operator to telemetry [#1535](https://github.com/openshift/cluster-monitoring-operator/pull/1535)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/ae7b0a320108ac77a77ad51233667771026072ad...48d00c8e133fe96ddf480e438c1c497c2f211f77)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/e788943cecd9b338505b25a64e4c9895d466cee4)

* [Bug 2093978](https://bugzilla.redhat.com/show_bug.cgi?id=2093978): Drop Node update permission for sdn-node [#1476](https://github.com/openshift/cluster-network-operator/pull/1476)
* [Bug 2092265](https://bugzilla.redhat.com/show_bug.cgi?id=2092265): Cleanup CNO relatedObjects [#1468](https://github.com/openshift/cluster-network-operator/pull/1468)
* [Bug 2083079](https://bugzilla.redhat.com/show_bug.cgi?id=2083079): Reserve port TCP/9104 for cluster-network-operator [#1429](https://github.com/openshift/cluster-network-operator/pull/1429)
* [Bug 2085463](https://bugzilla.redhat.com/show_bug.cgi?id=2085463): Add default-route field to egress-router k8s.v1.cni.cncf.io/networks [#1444](https://github.com/openshift/cluster-network-operator/pull/1444)
* Adds dougbtv to owners [release-4.9] [#1402](https://github.com/openshift/cluster-network-operator/pull/1402)
* [Bug 2058673](https://bugzilla.redhat.com/show_bug.cgi?id=2058673): ip-reconciler cronjob specification requires hostnetwork, api-int lb usage & proper backoff [backport 4.9] [#1323](https://github.com/openshift/cluster-network-operator/pull/1323)
* [Bug 2057957](https://bugzilla.redhat.com/show_bug.cgi?id=2057957): Do not apply OVN-Kubernetes `PodDisruptionBudget` on single-node clusters [#1316](https://github.com/openshift/cluster-network-operator/pull/1316)
* [release 4.9] Updates owners [#1333](https://github.com/openshift/cluster-network-operator/pull/1333)
* [Bug 2040530](https://bugzilla.redhat.com/show_bug.cgi?id=2040530): ovn: try to gracefully terminate ovn-northd and ovsdb [#1279](https://github.com/openshift/cluster-network-operator/pull/1279)
* [Bug 2046476](https://bugzilla.redhat.com/show_bug.cgi?id=2046476): sbdb and nbdb containers leave pid around if they restarted or crashed [#1291](https://github.com/openshift/cluster-network-operator/pull/1291)
* [Bug 2038252](https://bugzilla.redhat.com/show_bug.cgi?id=2038252): Backport 4.9  OVN drop icmp frag from other nodes on Azure cluster [#1273](https://github.com/openshift/cluster-network-operator/pull/1273)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/a16682ce057236ef47ee3d0165e39a95850f9c10...e788943cecd9b338505b25a64e4c9895d466cee4)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/cadc2f1d62ccad30823cbb333872859bbb557bc9)

* Ignore Profile updates triggered by old operands (#361) [#361](https://github.com/openshift/cluster-node-tuning-operator/pull/361)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/ce0b3ae329cb8fb2c270de2a6a0adc393d2a5c3b...cadc2f1d62ccad30823cbb333872859bbb557bc9)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/3b9b8286ca48a7a78f7d70a3befbf9c46c6b12e0)

* [release 4.10] Bug 2109399: openshift-apiserver pods never going NotReady [#502](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/502)
* [Bug 2047331](https://bugzilla.redhat.com/show_bug.cgi?id=2047331): global pull secret not working in OCP4.7.4+ for additio… [#491](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/491)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/13dbfe90070f494ee74518fe74780c4c9f4a7f6e...3b9b8286ca48a7a78f7d70a3befbf9c46c6b12e0)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/0b44295597fbebf97219fcb80b6e7522e9e86fd3)

* [Bug 2102760](https://bugzilla.redhat.com/show_bug.cgi?id=2102760): Add missing ibm cloud annotations to prometheus rbac [#294](https://github.com/openshift/cluster-storage-operator/pull/294)
* [Bug 2084219](https://bugzilla.redhat.com/show_bug.cgi?id=2084219): Fix RelatedObjects when an API is missing in the API server [#281](https://github.com/openshift/cluster-storage-operator/pull/281)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/2e76e02cb8479784a582e57a587be8fd5d75cae2...0b44295597fbebf97219fcb80b6e7522e9e86fd3)


### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/7f749f995ccc4657303ec0e365e9918865459605)

* Updating ose-cluster-update-keys images to be consistent with ART [#38](https://github.com/openshift/cluster-update-keys/pull/38)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/3e20043304c204cc82935b5c510654702db8f8dd...7f749f995ccc4657303ec0e365e9918865459605)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/324c267460d913c4b83d1aad649fc5165d5f05b0)

* [OCPBUGS-230](https://issues.redhat.com/browse/OCPBUGS-230): lib/resourcebuilder/batch: Stop waiting on Job deadline exceeded [#823](https://github.com/openshift/cluster-version-operator/pull/823)
* [Bug 2108619](https://bugzilla.redhat.com/show_bug.cgi?id=2108619): pkg/cvo: retain initial completed update history entry [#799](https://github.com/openshift/cluster-version-operator/pull/799)
* [Bug 2091806](https://bugzilla.redhat.com/show_bug.cgi?id=2091806): pkg/cvo: Separate payload load from payload apply [#786](https://github.com/openshift/cluster-version-operator/pull/786)
* [Bug 2032125](https://bugzilla.redhat.com/show_bug.cgi?id=2032125): lib/resourcemerge/core: Merge volumeMounts by mountPath [#715](https://github.com/openshift/cluster-version-operator/pull/715)
* [Bug 2055314](https://bugzilla.redhat.com/show_bug.cgi?id=2055314): Fixing the sync issue when desired version and channel changed at the same time [#742](https://github.com/openshift/cluster-version-operator/pull/742)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/f2551e5d22e4b5623a47f94555226ffa3d750e9d...324c267460d913c4b83d1aad649fc5165d5f05b0)


### [console](https://github.com/openshift/console/tree/43a43260f30572e043d95f03e0300d64b74a5e7d)

* [Bug 2089592](https://bugzilla.redhat.com/show_bug.cgi?id=2089592): [release-4.9] Add debounce to tektonhub versions api call to avoid many calls [#11553](https://github.com/openshift/console/pull/11553)
* [Bug 2093910](https://bugzilla.redhat.com/show_bug.cgi?id=2093910): change metrics queries based on metrics level configurations [#11644](https://github.com/openshift/console/pull/11644)
* [Bug 2097618](https://bugzilla.redhat.com/show_bug.cgi?id=2097618): Avoid using 'gp2' hardcoded storage class [#11716](https://github.com/openshift/console/pull/11716)
* [Bug 2068203](https://bugzilla.redhat.com/show_bug.cgi?id=2068203): Sample catalog is not displayed when one API call to the backend fails [#11616](https://github.com/openshift/console/pull/11616)
* [Bug 2084496](https://bugzilla.redhat.com/show_bug.cgi?id=2084496): fix bug where "Update blocked" label incorrectly displa… [#11484](https://github.com/openshift/console/pull/11484)
* [Bug 2097554](https://bugzilla.redhat.com/show_bug.cgi?id=2097554): Fix failing backend test after devfile registry update [#11714](https://github.com/openshift/console/pull/11714)
* [Bug 2082493](https://bugzilla.redhat.com/show_bug.cgi?id=2082493): - Rolebindings page doesn't load for normal users [#11630](https://github.com/openshift/console/pull/11630)
* [Bug 2084028](https://bugzilla.redhat.com/show_bug.cgi?id=2084028): Improve Firehose cache, fix broken import [#11554](https://github.com/openshift/console/pull/11554)
* [Bug 2089847](https://bugzilla.redhat.com/show_bug.cgi?id=2089847): Set dashboards timeout based on selected timespan [#11561](https://github.com/openshift/console/pull/11561)
* [Bug 2076690](https://bugzilla.redhat.com/show_bug.cgi?id=2076690): fix bug where RoleBindings are not displaying in ClusterRole > RoleBindings [#11362](https://github.com/openshift/console/pull/11362)
* [Bug 2081389](https://bugzilla.redhat.com/show_bug.cgi?id=2081389): Translate Extensions On Each Language Change [#11430](https://github.com/openshift/console/pull/11430)
* [Bug 2089546](https://bugzilla.redhat.com/show_bug.cgi?id=2089546): [release-4.9] Eliminate use of lookaside cache and move to Cachito [#11519](https://github.com/openshift/console/pull/11519)
* [Bug 2084028](https://bugzilla.redhat.com/show_bug.cgi?id=2084028): Improve Firehose cache, so that it does not return unexpected data also if isList differs on two concurrent calls [#11476](https://github.com/openshift/console/pull/11476)
* [Bug 2030408](https://bugzilla.redhat.com/show_bug.cgi?id=2030408): Disable replacement procedure from ODF UI [#11483](https://github.com/openshift/console/pull/11483)
* [Bug 2079231](https://bugzilla.redhat.com/show_bug.cgi?id=2079231): fix bug where ClusterRole > RoleBindings did not display… [#11405](https://github.com/openshift/console/pull/11405)
* [Bug 2048631](https://bugzilla.redhat.com/show_bug.cgi?id=2048631): missing volumes list in snapshot modal [#10984](https://github.com/openshift/console/pull/10984)
* [Bug 2046016](https://bugzilla.redhat.com/show_bug.cgi?id=2046016): SnapShot with Disk Hot-plug hangs [#10959](https://github.com/openshift/console/pull/10959)
* [Bug 2078554](https://bugzilla.redhat.com/show_bug.cgi?id=2078554): - Roles -> RoleBindings tab doesn't show RoleBindings correctly [#11392](https://github.com/openshift/console/pull/11392)
* [Bug 2070827](https://bugzilla.redhat.com/show_bug.cgi?id=2070827): Pipeline metrics: use prometheus-tenancy API to get data [#11270](https://github.com/openshift/console/pull/11270)
* [Bug 2073999](https://bugzilla.redhat.com/show_bug.cgi?id=2073999): avoid pre-fetching tekton hub task versions [#11312](https://github.com/openshift/console/pull/11312)
* [Bug 2066771](https://bugzilla.redhat.com/show_bug.cgi?id=2066771): Enhance Insights widget empty states [#11218](https://github.com/openshift/console/pull/11218)
* [Bug 2069258](https://bugzilla.redhat.com/show_bug.cgi?id=2069258): Decode secrets before authorizing repository [#11243](https://github.com/openshift/console/pull/11243)
* [Bug 2071579](https://bugzilla.redhat.com/show_bug.cgi?id=2071579): fix RoleBindings list page filter [#11279](https://github.com/openshift/console/pull/11279)
* [Bug 2077003](https://bugzilla.redhat.com/show_bug.cgi?id=2077003): Fix failing TestGetRegistrySamples test [#11368](https://github.com/openshift/console/pull/11368)
* [Bug 2071692](https://bugzilla.redhat.com/show_bug.cgi?id=2071692): Backport add-flow e2e tests to 4.9 [#11300](https://github.com/openshift/console/pull/11300)
* -Bug 2021595: Key value field is not getting updated under Environment Tab in OpenShift Web Console [#11176](https://github.com/openshift/console/pull/11176)
* [Bug 2064454](https://bugzilla.redhat.com/show_bug.cgi?id=2064454): return process data as array for list true in firehose as done in hooks [#11256](https://github.com/openshift/console/pull/11256)
* [Bug 2066298](https://bugzilla.redhat.com/show_bug.cgi?id=2066298): fix ClusterOperator Status, Version col sorts [#11206](https://github.com/openshift/console/pull/11206)
* [Bug 2065549](https://bugzilla.redhat.com/show_bug.cgi?id=2065549): Change the tekton hub api endpoint to use v1 api [#11197](https://github.com/openshift/console/pull/11197)
* [Bug 2060449](https://bugzilla.redhat.com/show_bug.cgi?id=2060449): Fix potential issues with namespaces that contains just numbers [#11133](https://github.com/openshift/console/pull/11133)
* [Bug 2021702](https://bugzilla.redhat.com/show_bug.cgi?id=2021702): Render correct conditions for csv vs installplan and subscriptioncondition [#10423](https://github.com/openshift/console/pull/10423)
* [Bug 2064454](https://bugzilla.redhat.com/show_bug.cgi?id=2064454): (Topology) Performance improvement by reducing rerenderings and deep-copy toJSON() calls [#11184](https://github.com/openshift/console/pull/11184)
* [Bug 2033712](https://bugzilla.redhat.com/show_bug.cgi?id=2033712): Update CSR model & fix approval/denial process [#10690](https://github.com/openshift/console/pull/10690)
* [Bug 2055293](https://bugzilla.redhat.com/show_bug.cgi?id=2055293): Sum total memory of unnamed container only [#11073](https://github.com/openshift/console/pull/11073)
* [Bug 2046641](https://bugzilla.redhat.com/show_bug.cgi?id=2046641): Add warning alert when installing operator to non suggested namespace [#10944](https://github.com/openshift/console/pull/10944)
* [Bug 2055100](https://bugzilla.redhat.com/show_bug.cgi?id=2055100): Revert "Add Dev Preview tag for IBM FlashSystem" [#11068](https://github.com/openshift/console/pull/11068)
* [Bug 2054608](https://bugzilla.redhat.com/show_bug.cgi?id=2054608): omit rolebindings with no subjects [#11055](https://github.com/openshift/console/pull/11055)
* [Bug 2056826](https://bugzilla.redhat.com/show_bug.cgi?id=2056826): Revert "Merge pull request #10316 from dtaylor113/e2e-tests-replace-codeready-operator" [#11087](https://github.com/openshift/console/pull/11087)
* [Bug 2052553](https://bugzilla.redhat.com/show_bug.cgi?id=2052553): Add 'Unavailable' status for cluster operator [#10125](https://github.com/openshift/console/pull/10125)
* [Bug 2050271](https://bugzilla.redhat.com/show_bug.cgi?id=2050271): show latest pipelinerun on the top of the list [#11019](https://github.com/openshift/console/pull/11019)
* [Bug 2033274](https://bugzilla.redhat.com/show_bug.cgi?id=2033274): Fix tektonhub task upgrading issue [#10678](https://github.com/openshift/console/pull/10678)
* [Bug 2051523](https://bugzilla.redhat.com/show_bug.cgi?id=2051523): change the Image Vulnerabilities tab to be project and not cluster scoped [#10159](https://github.com/openshift/console/pull/10159)
* [Bug 2053496](https://bugzilla.redhat.com/show_bug.cgi?id=2053496): Monitoring: use namespace to detect the activePerspective instead of useActivePerspective hook [#11042](https://github.com/openshift/console/pull/11042)
* [Bug 2052850](https://bugzilla.redhat.com/show_bug.cgi?id=2052850): Refreshing console from toaster taking to Install Operator [#11025](https://github.com/openshift/console/pull/11025)
* [Bug 2047350](https://bugzilla.redhat.com/show_bug.cgi?id=2047350): Fix TypeError when application has HelmRelease [#10990](https://github.com/openshift/console/pull/10990)
* [Bug 2026553](https://bugzilla.redhat.com/show_bug.cgi?id=2026553): Dispatch name filter value to redux [#10553](https://github.com/openshift/console/pull/10553)
* [Bug 2022158](https://bugzilla.redhat.com/show_bug.cgi?id=2022158): omit extension when code ref resolution fails [#10435](https://github.com/openshift/console/pull/10435)
* [Bug 2023339](https://bugzilla.redhat.com/show_bug.cgi?id=2023339): fix broken Argo CD link image [#10461](https://github.com/openshift/console/pull/10461)
* [Bug 2026414](https://bugzilla.redhat.com/show_bug.cgi?id=2026414): use prometheus tenancy URL to load data in devconsole observe dashboard [#10961](https://github.com/openshift/console/pull/10961)
* [Bug 2041434](https://bugzilla.redhat.com/show_bug.cgi?id=2041434): Monitoring: show a error message if wrong dashboard name is passed to the URL [#10857](https://github.com/openshift/console/pull/10857)
* [Bug 2047633](https://bugzilla.redhat.com/show_bug.cgi?id=2047633): Fix that export download model wasn't shown when primer export finished [#10965](https://github.com/openshift/console/pull/10965)
* [Bug 2040296](https://bugzilla.redhat.com/show_bug.cgi?id=2040296): Enable error stack trace messages to scroll [#10072](https://github.com/openshift/console/pull/10072)
* [Bug 2042041](https://bugzilla.redhat.com/show_bug.cgi?id=2042041): Console 2969: Changes to the project selector to allow system namespaces that are Favorited to be included in the Favorited list even when the option to Show default projects is unselected. [#10886](https://github.com/openshift/console/pull/10886)
* [Bug 2030128](https://bugzilla.redhat.com/show_bug.cgi?id=2030128): Fix pipeline builder edge spacing to avoid improper edge shapes [#10629](https://github.com/openshift/console/pull/10629)
* [Bug 2044292](https://bugzilla.redhat.com/show_bug.cgi?id=2044292): Filter superseded helm secrets and fix firehose to support partial metadata [#10915](https://github.com/openshift/console/pull/10915)
* [release 4.9] Bug 2042683: Check rbac before polling for rules silences [#10888](https://github.com/openshift/console/pull/10888)
* [Bug 2044287](https://bugzilla.redhat.com/show_bug.cgi?id=2044287): Add support for fetching partial metadata and fix helm list page crash [#10914](https://github.com/openshift/console/pull/10914)
* [Bug 2044259](https://bugzilla.redhat.com/show_bug.cgi?id=2044259): Topology performance: Do not fetch HPA for each Deployment (Pod Ring) [#10913](https://github.com/openshift/console/pull/10913)
* [Bug 2042456](https://bugzilla.redhat.com/show_bug.cgi?id=2042456): Check if name label exists before comparing [#10882](https://github.com/openshift/console/pull/10882)
* [Full changelog](https://github.com/openshift/console/compare/d0cc1633694a070a4594764d2b9bd448ba287d87...43a43260f30572e043d95f03e0300d64b74a5e7d)


### [console-operator](https://github.com/openshift/console-operator/tree/b3f14011e79970152c9be6e3068635cc94c904cd)

* [Bug 2055494](https://bugzilla.redhat.com/show_bug.cgi?id=2055494): Distinguish between route conditions [#662](https://github.com/openshift/console-operator/pull/662)
* [Bug 2055494](https://bugzilla.redhat.com/show_bug.cgi?id=2055494): console-operator should report Upgradeable False when SAN-less certs are used [#638](https://github.com/openshift/console-operator/pull/638)
* [Bug 2075030](https://bugzilla.redhat.com/show_bug.cgi?id=2075030): Re-enable TestMetricsEndpoint e2e test case [#647](https://github.com/openshift/console-operator/pull/647)
* [Full changelog](https://github.com/openshift/console-operator/compare/fdcb82f487fb8655edcaee77cef63c492e72e0b1...b3f14011e79970152c9be6e3068635cc94c904cd)


### [container-networking-plugins](https://github.com/openshift/containernetworking-plugins/tree/eb5fcc1156afff3261deb50ed55283de3322b9fa)

* [Bug 2101664](https://bugzilla.redhat.com/show_bug.cgi?id=2101664): Sysctl IFNAME [backport 4.9] [#64](https://github.com/openshift/containernetworking-plugins/pull/64)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/44a49134de5e4d4cc136cc0862d35f226d61d3be...eb5fcc1156afff3261deb50ed55283de3322b9fa)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/2f66df4fce6d1971985fb45ea2220a0ff3cf09ba)

* [Bug 2110255](https://bugzilla.redhat.com/show_bug.cgi?id=2110255): SWEET32: Improve TLS configuration for Kube RBAC Proxy [#152](https://github.com/openshift/csi-driver-manila-operator/pull/152)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/fd2d838d18b74baefa5a20398cf54826c0a803f9...2f66df4fce6d1971985fb45ea2220a0ff3cf09ba)


### [docker-builder](https://github.com/openshift/builder/tree/1a32676c7a9b679da164b916b759f414f7071fbf)

* [Bug 2050287](https://bugzilla.redhat.com/show_bug.cgi?id=2050287): Update buildah to v1.22.4 [#285](https://github.com/openshift/builder/pull/285)
* [Bug 2042444](https://bugzilla.redhat.com/show_bug.cgi?id=2042444): getAssembleUser(): strip the group part out before checking the UID [#280](https://github.com/openshift/builder/pull/280)
* [Full changelog](https://github.com/openshift/builder/compare/7f2458824262068b41689438655341178a2df26a...1a32676c7a9b679da164b916b759f414f7071fbf)


### [docker-registry](https://github.com/openshift/image-registry/tree/ae662c8dc3fd8ddbd3e076330044526cf120f817)

* [Bug 2086864](https://bugzilla.redhat.com/show_bug.cgi?id=2086864): Fix ICSP for subrepositories [#333](https://github.com/openshift/image-registry/pull/333)
* [Bug 2060363](https://bugzilla.redhat.com/show_bug.cgi?id=2060363): Fix s3 driver for supporting ceph radosgw [#327](https://github.com/openshift/image-registry/pull/327)
* [Bug 2053222](https://bugzilla.redhat.com/show_bug.cgi?id=2053222): Fix pull-through for images that have dots in their namespace [#309](https://github.com/openshift/image-registry/pull/309)
* [Bug 2042677](https://bugzilla.redhat.com/show_bug.cgi?id=2042677): Fix auth for docker.io images [#305](https://github.com/openshift/image-registry/pull/305)
* [Bug 2029987](https://bugzilla.redhat.com/show_bug.cgi?id=2029987): Try another registry if blob is not found [#303](https://github.com/openshift/image-registry/pull/303)
* [Full changelog](https://github.com/openshift/image-registry/compare/50d54ae38c2618501ec2c5e0897731d1a916db10...ae662c8dc3fd8ddbd3e076330044526cf120f817)


### [etcd](https://github.com/openshift/etcd/tree/9b682989b43b1b2409253e7a96f9ee6a4548b919)

* Update OWNERS [#124](https://github.com/openshift/etcd/pull/124)
* [Bug 2077501](https://bugzilla.redhat.com/show_bug.cgi?id=2077501): Merge Upstream etcd 3.5.3 into Openshift 4.9 [#119](https://github.com/openshift/etcd/pull/119)
* [Full changelog](https://github.com/openshift/etcd/compare/f99cada055fe83dc3cefb546dea95547d7da727d...9b682989b43b1b2409253e7a96f9ee6a4548b919)


### [gcp-machine-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/c955c03b2d05e3b8eb0d39d5b4927128e6d1c6c6)

* Updating ose-gcp-machine-controllers images to be consistent with ART [#166](https://github.com/openshift/cluster-api-provider-gcp/pull/166)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/d92b08844a2b0ae31e3a78a5548baab7c9d39478...c955c03b2d05e3b8eb0d39d5b4927128e6d1c6c6)


### [haproxy-router](https://github.com/openshift/router/tree/f89bbcefd24bc591788a56c5a562c9fb119161ae)

* [Bug 2010227](https://bugzilla.redhat.com/show_bug.cgi?id=2010227): HTTPS redirect happens even if there is a more specific http-only route [#367](https://github.com/openshift/router/pull/367)
* [Full changelog](https://github.com/openshift/router/compare/2d1e1f4bd413dd283c92638e23fae940ef4c1e54...f89bbcefd24bc591788a56c5a562c9fb119161ae)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/9e95cb991b270508653db4beebf8bfd505cc463f)

* [Bug 2106655](https://bugzilla.redhat.com/show_bug.cgi?id=2106655): UPSTREAM: 109103: cpu/memory manager containerMap memory leak [#1325](https://github.com/openshift/kubernetes/pull/1325)
* [Bug 2083554](https://bugzilla.redhat.com/show_bug.cgi?id=2083554): UPSTREAM: 109933: fix: exclude non-ready nodes and deleted nodes from azure load balancers [#1256](https://github.com/openshift/kubernetes/pull/1256)
* [Bug 2105663](https://bugzilla.redhat.com/show_bug.cgi?id=2105663): UPSTREAM: <carry>: update list of deprecated apis [#1316](https://github.com/openshift/kubernetes/pull/1316)
* [release 4.9] Bug Bug 2106962: UPSTREAM: <carry>: use correct base image for testing [#1321](https://github.com/openshift/kubernetes/pull/1321)
* [Bug 2075704](https://bugzilla.redhat.com/show_bug.cgi?id=2075704): Backport 107821 and 107831 [#1267](https://github.com/openshift/kubernetes/pull/1267)
* [Bug 2075704](https://bugzilla.redhat.com/show_bug.cgi?id=2075704): Revert Backport 107821 and 107831 [#1266](https://github.com/openshift/kubernetes/pull/1266)
* [Bug 2075704](https://bugzilla.redhat.com/show_bug.cgi?id=2075704): Backport 107821 and 107831 [#1242](https://github.com/openshift/kubernetes/pull/1242)
* [Bug 2069310](https://bugzilla.redhat.com/show_bug.cgi?id=2069310): UPSTREAM: <carry>: use hardcoded rest mapper from library-go [#1233](https://github.com/openshift/kubernetes/pull/1233)
* [Bug 2066390](https://bugzilla.redhat.com/show_bug.cgi?id=2066390): Rebase 1.22.8 [#1223](https://github.com/openshift/kubernetes/pull/1223)
* [Bug 2050632](https://bugzilla.redhat.com/show_bug.cgi?id=2050632): UPSTREAM: <drop>: Give warning when ipFamilyPolicy implicitly set [#1170](https://github.com/openshift/kubernetes/pull/1170)
* [Bug 2073153](https://bugzilla.redhat.com/show_bug.cgi?id=2073153): golang toolchain unsupported parsers tag [#1239](https://github.com/openshift/kubernetes/pull/1239)
* [Bug 2065786](https://bugzilla.redhat.com/show_bug.cgi?id=2065786): Backport 108366 OutofCpu Fixes [#1222](https://github.com/openshift/kubernetes/pull/1222)
* [Bug 2024643](https://bugzilla.redhat.com/show_bug.cgi?id=2024643): Rebase v1.22.5 [#1103](https://github.com/openshift/kubernetes/pull/1103)
* [Bug 2043807](https://bugzilla.redhat.com/show_bug.cgi?id=2043807): UPSTREAM 107564: kube-apiserver integration test: allow IPs with leading zeros on the API [#1134](https://github.com/openshift/kubernetes/pull/1134)
* [Bug 2043807](https://bugzilla.redhat.com/show_bug.cgi?id=2043807): add deprecated parser build flag [#1166](https://github.com/openshift/kubernetes/pull/1166)
* [Bug 2045972](https://bugzilla.redhat.com/show_bug.cgi?id=2045972): UPSTREAM: <carry>: set correctly static pods CPUs when workload partitioning is disabled [#1144](https://github.com/openshift/kubernetes/pull/1144)
* [Bug 2039373](https://bugzilla.redhat.com/show_bug.cgi?id=2039373): UPSTREAM: 89885: SQUASH: Retry fetching clouds.conf [#1107](https://github.com/openshift/kubernetes/pull/1107)
* [Bug 2044438](https://bugzilla.redhat.com/show_bug.cgi?id=2044438): UPSTREAM: 107637: backport inotify fix to 4.9 [#1138](https://github.com/openshift/kubernetes/pull/1138)
* [Bug 2040338](https://bugzilla.redhat.com/show_bug.cgi?id=2040338): UPSTREAM: <carry>: remove egressnetworkpolicies from gc ignored resources [#1125](https://github.com/openshift/kubernetes/pull/1125)
* [Full changelog](https://github.com/openshift/kubernetes/compare/e790d7fa218bce0e127362bdaef98fa2f66c5aa5...9e95cb991b270508653db4beebf8bfd505cc463f)


### [insights-operator](https://github.com/openshift/insights-operator/tree/21096da574cee75edb6d8e006bb09547a3ed4d46)

* [Bug 2083467](https://bugzilla.redhat.com/show_bug.cgi?id=2083467): Fix the clusteroperator conditions values when IO is degraded (#623) [#623](https://github.com/openshift/insights-operator/pull/623)
* [Bug 2076903](https://bugzilla.redhat.com/show_bug.cgi?id=2076903): Gather namespace names with overlapping UIDs (#605) (#611) [#605](https://github.com/openshift/insights-operator/pull/605)
* [Bug 2066825](https://bugzilla.redhat.com/show_bug.cgi?id=2066825): Gather some error messages from the kube-controller-manager containers (#598) (#599) [#598](https://github.com/openshift/insights-operator/pull/598)
* [Full changelog](https://github.com/openshift/insights-operator/compare/3f1401abeef427842a435eb1776cb97efa81dc34...21096da574cee75edb6d8e006bb09547a3ed4d46)


### [ironic](https://github.com/openshift/ironic-image/tree/5bec3b6f29b3c4234dc321fbdf1b75cfdb478a23)

* [OCP 4.9] Update OWNERS [#278](https://github.com/openshift/ironic-image/pull/278)
* [Bug 2088319](https://bugzilla.redhat.com/show_bug.cgi?id=2088319): Backport weak eTag handling fix to OpenShift 4.9 [#277](https://github.com/openshift/ironic-image/pull/277)
* [Bug 2082103](https://bugzilla.redhat.com/show_bug.cgi?id=2082103): Enable vMedia provisioning of Nokia servers [#274](https://github.com/openshift/ironic-image/pull/274)
* [Full changelog](https://github.com/openshift/ironic-image/compare/e188116f03e222fd24d941983430f6225fa252d2...5bec3b6f29b3c4234dc321fbdf1b75cfdb478a23)


### [ironic-ipa-downloader](https://github.com/openshift/ironic-ipa-downloader/tree/0c913eeec8be493749fa2d5b17b7f6e6da241d67)

* [Bug 2100786](https://bugzilla.redhat.com/show_bug.cgi?id=2100786): Include Fix discovering WWN/serial for devicemapper devices [#93](https://github.com/openshift/ironic-ipa-downloader/pull/93)
* [Bug 2089313](https://bugzilla.redhat.com/show_bug.cgi?id=2089313): Multipath fix for passive paths [#92](https://github.com/openshift/ironic-ipa-downloader/pull/92)
* [OCP 4.9] Update OWNERS [#89](https://github.com/openshift/ironic-ipa-downloader/pull/89)
* [Full changelog](https://github.com/openshift/ironic-ipa-downloader/compare/6e9af39e14d7f531a5c0f0b025bc31c4c4392732...0c913eeec8be493749fa2d5b17b7f6e6da241d67)


### [jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs](https://github.com/openshift/jenkins/tree/0e64d3bfcbb404ebfd8b2d9024bed1ae01084447)

* [Bug 2076256](https://bugzilla.redhat.com/show_bug.cgi?id=2076256): Mitigate multiple CVEs [#1432](https://github.com/openshift/jenkins/pull/1432)
* [Bug 2077289](https://bugzilla.redhat.com/show_bug.cgi?id=2077289): set necessary JVM args to allow jenkins JVM to come up on a FIPS node [#1433](https://github.com/openshift/jenkins/pull/1433)
* [Bug 2069498](https://bugzilla.redhat.com/show_bug.cgi?id=2069498): [release-4.9] update bundle plugins [#1422](https://github.com/openshift/jenkins/pull/1422)
* [Bug 2067128](https://bugzilla.redhat.com/show_bug.cgi?id=2067128): [release-4.9] compute bundle plugins in build [#1413](https://github.com/openshift/jenkins/pull/1413)
* [Bug 2058751](https://bugzilla.redhat.com/show_bug.cgi?id=2058751): [release-4.9] 2022-02-15 Security Advisory [#1406](https://github.com/openshift/jenkins/pull/1406)
* [Bug 2052063](https://bugzilla.redhat.com/show_bug.cgi?id=2052063): bump openshift-sync to 1.0.53 [#1385](https://github.com/openshift/jenkins/pull/1385)
* [Bug 2044941](https://bugzilla.redhat.com/show_bug.cgi?id=2044941): Jenkins Fixes for CVE-2022-20617 and CVE-2022-20612 [#1369](https://github.com/openshift/jenkins/pull/1369)
* [Full changelog](https://github.com/openshift/jenkins/compare/650eac9df1260d2df97dc59d01825a7888e7173b...0e64d3bfcbb404ebfd8b2d9024bed1ae01084447)


### [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter/tree/bfb3922a80fe45c0fe7d5b1d26a2dfb2fc67f981)

* Updating ose-prometheus-adapter images to be consistent with ART [#50](https://github.com/openshift/k8s-prometheus-adapter/pull/50)
* [Full changelog](https://github.com/openshift/k8s-prometheus-adapter/compare/adfdd41d3fba23d38645c1c655687c28e27979df...bfb3922a80fe45c0fe7d5b1d26a2dfb2fc67f981)


### [keepalived-ipfailover](https://github.com/openshift/images/tree/b379643834763e8e9cf94ec97cdfd0f922f1568b)

* Updating ose-egress-http-proxy images to be consistent with ART [#91](https://github.com/openshift/images/pull/91)
* Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART [#93](https://github.com/openshift/images/pull/93)
* [Full changelog](https://github.com/openshift/images/compare/f93eca83376b6aaf681755c568b6e0393f569c04...b379643834763e8e9cf94ec97cdfd0f922f1568b)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/c1327237b5af4fc083ace0c2c9d7bd2b0095538b)

* [Bug 2093978](https://bugzilla.redhat.com/show_bug.cgi?id=2093978): Remove node-tainting for too-small MTU [#436](https://github.com/openshift/sdn/pull/436)
* [Bug 2090624](https://bugzilla.redhat.com/show_bug.cgi?id=2090624): Masquerade in cluster traffic that is marked for egress IP [#433](https://github.com/openshift/sdn/pull/433)
* [Bug 2063970](https://bugzilla.redhat.com/show_bug.cgi?id=2063970): delete stale UDP conntrack entries for loadbalancer IPs [#413](https://github.com/openshift/sdn/pull/413)
* [Full changelog](https://github.com/openshift/sdn/compare/ecd60f937c2ad1526888917378023fc06818b012...c1327237b5af4fc083ace0c2c9d7bd2b0095538b)


### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/a2143bc29bd499c479ae67a1e446466338a4f9e9)

* Updating ose-kube-storage-version-migrator images to be consistent with ART [#179](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/179)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/901a6d221d1cf79b4b6ba859bb43521e0ee635b3...a2143bc29bd499c479ae67a1e446466338a4f9e9)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/42b70cbdd93860602e50ac1690bc8c6168063242)

* [Bug 2111004](https://bugzilla.redhat.com/show_bug.cgi?id=2111004): Add DescribeRegions permission for aws controller [#1048](https://github.com/openshift/machine-api-operator/pull/1048)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/383c9b959b69044ec533118cf5d41f17101137f1...42b70cbdd93860602e50ac1690bc8c6168063242)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/f655ae4195d36c7c8cacb41c746cdfe085d2c76f)

* [Bug 2108538](https://bugzilla.redhat.com/show_bug.cgi?id=2108538): configure-ovs: improve handling of static ip and mac address configuration [#3254](https://github.com/openshift/machine-config-operator/pull/3254)
* [Bug 2098099](https://bugzilla.redhat.com/show_bug.cgi?id=2098099): configure-ovs: clone connection to avoid selinux problems [#3188](https://github.com/openshift/machine-config-operator/pull/3188)
* [Bug 2089763](https://bugzilla.redhat.com/show_bug.cgi?id=2089763): configure-ovs: persist profiles after auto-connect has been set [#3183](https://github.com/openshift/machine-config-operator/pull/3183)
* [Bug 2089763](https://bugzilla.redhat.com/show_bug.cgi?id=2089763): configure-ovs: avoid restarting NetworkManager [#3160](https://github.com/openshift/machine-config-operator/pull/3160)
* [Bug 2071689](https://bugzilla.redhat.com/show_bug.cgi?id=2071689): lib/resourcemerge: handle container env var deletions [#3057](https://github.com/openshift/machine-config-operator/pull/3057)
* [Bug 2081123](https://bugzilla.redhat.com/show_bug.cgi?id=2081123): Add KUBELET_NODEIP_HINT to nodeip-configuration [#3130](https://github.com/openshift/machine-config-operator/pull/3130)
* [Bug 2070490](https://bugzilla.redhat.com/show_bug.cgi?id=2070490): configure-ovs: reload NM only when necessary [#3048](https://github.com/openshift/machine-config-operator/pull/3048)
* [Bug 2074491](https://bugzilla.redhat.com/show_bug.cgi?id=2074491): configure-ovs: move dhcp config from br-ex to ovs-if-br-ex [#3077](https://github.com/openshift/machine-config-operator/pull/3077)
* [Bug 2062310](https://bugzilla.redhat.com/show_bug.cgi?id=2062310): Add --templates flag to MCC bootstrap command [#2998](https://github.com/openshift/machine-config-operator/pull/2998)
* [Bug 2063327](https://bugzilla.redhat.com/show_bug.cgi?id=2063327): [release-4.9] Ensure directories are created with usable permission bits [#3013](https://github.com/openshift/machine-config-operator/pull/3013)
* [Bug 2038249](https://bugzilla.redhat.com/show_bug.cgi?id=2038249): Improvements for configure-ovs script [#2901](https://github.com/openshift/machine-config-operator/pull/2901)
* [Bug 2025474](https://bugzilla.redhat.com/show_bug.cgi?id=2025474): annotate rendered config with OCP version [#2964](https://github.com/openshift/machine-config-operator/pull/2964)
* [Bug 2058511](https://bugzilla.redhat.com/show_bug.cgi?id=2058511): Prepend to search domains instead of replacing [#2966](https://github.com/openshift/machine-config-operator/pull/2966)
* [Bug 2050911](https://bugzilla.redhat.com/show_bug.cgi?id=2050911): tighten operator availability conditions [#2946](https://github.com/openshift/machine-config-operator/pull/2946)
* [Bug 2032985](https://bugzilla.redhat.com/show_bug.cgi?id=2032985): fixes 1 to 1 containerruntime config mapping [#2876](https://github.com/openshift/machine-config-operator/pull/2876)
* [Bug 2043650](https://bugzilla.redhat.com/show_bug.cgi?id=2043650): Avoid dynamically allocated port range for haproxy [#2923](https://github.com/openshift/machine-config-operator/pull/2923)
* [Bug 2044503](https://bugzilla.redhat.com/show_bug.cgi?id=2044503): ovs-configuration: use lower than NM default ethernet route metric [#2928](https://github.com/openshift/machine-config-operator/pull/2928)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/23d93af42378eefe48c8457dd21a2e23f53b2a94...f655ae4195d36c7c8cacb41c746cdfe085d2c76f)


### [multus-route-override-cni](https://github.com/openshift/route-override-cni/tree/19117087e6a289153d54dd6e72bc52447da8a13b)

* Updating ose-multus-route-override-cni images to be consistent with ART [#23](https://github.com/openshift/route-override-cni/pull/23)
* Updating ose-multus-route-override-cni-alt images to be consistent with ART [#18](https://github.com/openshift/route-override-cni/pull/18)
* [Full changelog](https://github.com/openshift/route-override-cni/compare/707dd38046554810f601f2fae4a69bc4b907d7d3...19117087e6a289153d54dd6e72bc52447da8a13b)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/ddda41c65fa75a64e19ae504c7e9d2a1faf4bab5)

* [Bug 2064859](https://bugzilla.redhat.com/show_bug.cgi?id=2064859): Sync context improvements [backport 4.9] [#89](https://github.com/openshift/whereabouts-cni/pull/89)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/43552df5f301618a1857c9a1c2b51cbb7188ad38...ddda41c65fa75a64e19ae504c7e9d2a1faf4bab5)


### [must-gather](https://github.com/openshift/must-gather/tree/115ab0d02ed613207ff1dddccd42c64d0740deb9)

* [Bug 2092265](https://bugzilla.redhat.com/show_bug.cgi?id=2092265): Add networking resources [#308](https://github.com/openshift/must-gather/pull/308)
* [Bug 2052929](https://bugzilla.redhat.com/show_bug.cgi?id=2052929): Fix ovn-nbctl commands for ipv6 [#284](https://github.com/openshift/must-gather/pull/284)
* [Full changelog](https://github.com/openshift/must-gather/compare/d4b3f385ec4ee197057e18fb43fbb9a3e2b0e7f8...115ab0d02ed613207ff1dddccd42c64d0740deb9)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/4f9b895fa1b7d7802288e1733e21aa5d96fd26bf)

* Added METRIC_TEST_IMAGE var (#56) [#56](https://github.com/openshift/network-metrics-daemon/pull/56)
* Fix field selector (#51) [#51](https://github.com/openshift/network-metrics-daemon/pull/51)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/9fd6103057d648a153cba0b8f06db92eff6d62f9...4f9b895fa1b7d7802288e1733e21aa5d96fd26bf)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/8b203f97716abbc416e4d5ca610d2f54d73cbfda)

* [Bug 2043807](https://bugzilla.redhat.com/show_bug.cgi?id=2043807): add deprecated parser build flag [#72](https://github.com/openshift/oauth-apiserver/pull/72)
* Updating ose-oauth-apiserver images to be consistent with ART [#56](https://github.com/openshift/oauth-apiserver/pull/56)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/6e0f92194d5a25728c826fefb2d99c5e88ebb5e5...8b203f97716abbc416e4d5ca610d2f54d73cbfda)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/755eaf5cb117c9cd0901797a19f59abc840470c0)

* Add coreydaley as reviewer/approver for pkg/build [#299](https://github.com/openshift/openshift-apiserver/pull/299)
* [Bug 2053222](https://bugzilla.redhat.com/show_bug.cgi?id=2053222): Fix importing images that have dots in their namespace [#282](https://github.com/openshift/openshift-apiserver/pull/282)
* [Bug 2043807](https://bugzilla.redhat.com/show_bug.cgi?id=2043807): add deprecated parser build flag [#277](https://github.com/openshift/openshift-apiserver/pull/277)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/aec7074dbd2f1b5c01de34fe164036798342a0ff...755eaf5cb117c9cd0901797a19f59abc840470c0)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/30b60caf098773ce81b520b761a2d47b35fc9800)

* [Bug 2110255](https://bugzilla.redhat.com/show_bug.cgi?id=2110255): SWEET32: Improve TLS configuration for Kube RBAC Proxy [#91](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/91)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/56efc78519686ebd218c085ea51b39e4f1266a22...30b60caf098773ce81b520b761a2d47b35fc9800)


### [openstack-machine-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/277eeabaa6a0fe750c6ae4acba15b637724cfc51)

* [Bug 2077381](https://bugzilla.redhat.com/show_bug.cgi?id=2077381): Fix InstanceCreate port & trunk cleanup [#234](https://github.com/openshift/cluster-api-provider-openstack/pull/234)
* [Bug 2064633](https://bugzilla.redhat.com/show_bug.cgi?id=2064633): Ensure subnets belong to the queried network [#222](https://github.com/openshift/cluster-api-provider-openstack/pull/222)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/a7442bb18bce01a0eb0ffe99d550aa7ba584ea25...277eeabaa6a0fe750c6ae4acba15b637724cfc51)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/0a0de8571a198895ab06ae0e4ea7b353a828c410)

* [Bug 2102559](https://bugzilla.redhat.com/show_bug.cgi?id=2102559): opm bug fix [#328](https://github.com/openshift/operator-framework-olm/pull/328)
* [Bug 2079082](https://bugzilla.redhat.com/show_bug.cgi?id=2079082): Replace collect-profile jobs that haven't completed [#293](https://github.com/openshift/operator-framework-olm/pull/293)
* [Bug 2073967](https://bugzilla.redhat.com/show_bug.cgi?id=2073967): Fix a bug in deletion of webhook service for replacement [#284](https://github.com/openshift/operator-framework-olm/pull/284)
* [Bug 2072995](https://bugzilla.redhat.com/show_bug.cgi?id=2072995): Emit CSV metric on startup [#280](https://github.com/openshift/operator-framework-olm/pull/280)
* [Bug 2054848](https://bugzilla.redhat.com/show_bug.cgi?id=2054848): Do not modify object from the lister cache (#2562) [#253](https://github.com/openshift/operator-framework-olm/pull/253)
* [Bug 2048450](https://bugzilla.redhat.com/show_bug.cgi?id=2048450): Bump containerd to 1.4.11 [#252](https://github.com/openshift/operator-framework-olm/pull/252)
* [Bug 2000379](https://bugzilla.redhat.com/show_bug.cgi?id=2000379): fix: ensure operator images are included in rendered bundles related images [#180](https://github.com/openshift/operator-framework-olm/pull/180)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/5fc4c78bb48e66a252672aae137c8dcd8a6e43a8...0a0de8571a198895ab06ae0e4ea7b353a828c410)


### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/5ea2970a24ad07df8bc94f7aa7cbcb22a8f4e849)

* [Bug 2024491](https://bugzilla.redhat.com/show_bug.cgi?id=2024491): Align manifest dir with storage operator [#78](https://github.com/openshift/ovirt-csi-driver-operator/pull/78)
* [Bug 2056995](https://bugzilla.redhat.com/show_bug.cgi?id=2056995): Increase timeouts for CSI driver [#88](https://github.com/openshift/ovirt-csi-driver-operator/pull/88)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/9302429d26b03225c302a22a9a8d218a05a89bc9...5ea2970a24ad07df8bc94f7aa7cbcb22a8f4e849)


### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/f70c2871c668772d468a21a35d05cfb66b3ecf0f)

* [Bug 2115845](https://bugzilla.redhat.com/show_bug.cgi?id=2115845): [release-4.9] OCP CARRY: Add the rules to EXTERNALIPs only for SGW mode [#1233](https://github.com/openshift/ovn-kubernetes/pull/1233)
* [Bug 2096802](https://bugzilla.redhat.com/show_bug.cgi?id=2096802): duplicated IPs can be assigned to multiple Pods [#1136](https://github.com/openshift/ovn-kubernetes/pull/1136)
* [Bug 2105654](https://bugzilla.redhat.com/show_bug.cgi?id=2105654): egressIP: node retrieval failure is not respected, causes panic [#1186](https://github.com/openshift/ovn-kubernetes/pull/1186)
* [Bug 2105266](https://bugzilla.redhat.com/show_bug.cgi?id=2105266): EGW: Clean Stale Conntrack Entries [#1192](https://github.com/openshift/ovn-kubernetes/pull/1192)
* [Bug 2097157](https://bugzilla.redhat.com/show_bug.cgi?id=2097157): Bumps OVN to 21.12.0-58.el8fdp [#1140](https://github.com/openshift/ovn-kubernetes/pull/1140)
* [Bug 2105277](https://bugzilla.redhat.com/show_bug.cgi?id=2105277): Fix panics in DestroyNetworkPolicy if policy is nil [#1183](https://github.com/openshift/ovn-kubernetes/pull/1183)
* [Bug 2088630](https://bugzilla.redhat.com/show_bug.cgi?id=2088630): EgressIP NATs are not being cleared correctly from the logical router [#1103](https://github.com/openshift/ovn-kubernetes/pull/1103)
* [Bug 2083239](https://bugzilla.redhat.com/show_bug.cgi?id=2083239): [Downstream-only][4.9-only] Always add complete efw ACL rules [#1088](https://github.com/openshift/ovn-kubernetes/pull/1088)
* [Bug 2087226](https://bugzilla.redhat.com/show_bug.cgi?id=2087226): enable `exportloopref` linter and fix violations [#1096](https://github.com/openshift/ovn-kubernetes/pull/1096)
* [Bug 2065782](https://bugzilla.redhat.com/show_bug.cgi?id=2065782): [release-4.9][backport] Fix cleaning VF representor ports [#1002](https://github.com/openshift/ovn-kubernetes/pull/1002)
* [Bug 2077369](https://bugzilla.redhat.com/show_bug.cgi?id=2077369): [release-4.9] fix ipv6 network policy [#1046](https://github.com/openshift/ovn-kubernetes/pull/1046)
* [Bug 2059700](https://bugzilla.redhat.com/show_bug.cgi?id=2059700): [4.9z] After reboot egress node, lr-policy-list was not correct, some duplicate records or missed internal IPs [#981](https://github.com/openshift/ovn-kubernetes/pull/981)
* [Bug 2058683](https://bugzilla.redhat.com/show_bug.cgi?id=2058683): [4.9z] Multiple ExGW cache validation/improvements [#972](https://github.com/openshift/ovn-kubernetes/pull/972)
* [Bug 2068619](https://bugzilla.redhat.com/show_bug.cgi?id=2068619): egressgw: fix deadlock due to behavior of RWLock [#1012](https://github.com/openshift/ovn-kubernetes/pull/1012)
* [Bug 2063835](https://bugzilla.redhat.com/show_bug.cgi?id=2063835): backport 2052975 to 4.9 [#996](https://github.com/openshift/ovn-kubernetes/pull/996)
* [Bug 2060080](https://bugzilla.redhat.com/show_bug.cgi?id=2060080): [release-4.9] Network Policy fixes [#985](https://github.com/openshift/ovn-kubernetes/pull/985)
* [release 4.9] Update project owners [#991](https://github.com/openshift/ovn-kubernetes/pull/991)
* [Bug 2055317](https://bugzilla.redhat.com/show_bug.cgi?id=2055317): Hack ITP:preferLocal for DNS service [#964](https://github.com/openshift/ovn-kubernetes/pull/964)
* [Bug 2034744](https://bugzilla.redhat.com/show_bug.cgi?id=2034744): Fix egress IP allocator sync [#887](https://github.com/openshift/ovn-kubernetes/pull/887)
* [Bug 2053310](https://bugzilla.redhat.com/show_bug.cgi?id=2053310): [release-4.9] Fix pod-creation-retry [#951](https://github.com/openshift/ovn-kubernetes/pull/951)
* [Bug 2045576](https://bugzilla.redhat.com/show_bug.cgi?id=2045576): [CARRY][Downstream-only] Give warning when ipFamilyPolicy implicitly set [#938](https://github.com/openshift/ovn-kubernetes/pull/938)
* [Bug 2054299](https://bugzilla.redhat.com/show_bug.cgi?id=2054299): Lock the reassignment procedure during node deletion to avoid races [#955](https://github.com/openshift/ovn-kubernetes/pull/955)
* [Bug 2056883](https://bugzilla.redhat.com/show_bug.cgi?id=2056883): Revert "HACK: disable skip_snat for load balancers." [#942](https://github.com/openshift/ovn-kubernetes/pull/942)
* [Bug 2055549](https://bugzilla.redhat.com/show_bug.cgi?id=2055549): Fix podHandlerCache key [#962](https://github.com/openshift/ovn-kubernetes/pull/962)
* [Bug 2040594](https://bugzilla.redhat.com/show_bug.cgi?id=2040594): Create iptables NAT rules also for loadbalancer services [#905](https://github.com/openshift/ovn-kubernetes/pull/905)
* [Bug 2014003](https://bugzilla.redhat.com/show_bug.cgi?id=2014003): Fix gateway routers answer ARP/NDP requests for LoadBalancer/ExternalIP services [#952](https://github.com/openshift/ovn-kubernetes/pull/952)
* [Bug 2054139](https://bugzilla.redhat.com/show_bug.cgi?id=2054139): Don't return err when annotation cannot be unmarshalled [#954](https://github.com/openshift/ovn-kubernetes/pull/954)
* [Bug 1996751](https://bugzilla.redhat.com/show_bug.cgi?id=1996751): Bump OVN to 21.12 [#959](https://github.com/openshift/ovn-kubernetes/pull/959)
* [Bug 2028812](https://bugzilla.redhat.com/show_bug.cgi?id=2028812): Modification of ClusterIPs shall trigger svc update [#872](https://github.com/openshift/ovn-kubernetes/pull/872)
* [Bug 2042494](https://bugzilla.redhat.com/show_bug.cgi?id=2042494): [4.9] Set the OVS port as transient [#914](https://github.com/openshift/ovn-kubernetes/pull/914)
* [Bug 2022049](https://bugzilla.redhat.com/show_bug.cgi?id=2022049): EgressGW: only return unique elements from getRouteInfosForGateway() [#826](https://github.com/openshift/ovn-kubernetes/pull/826)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/17068c42b4d1ffa29ee248968dd4b210098e839a...f70c2871c668772d468a21a35d05cfb66b3ecf0f)


### [prometheus-config-reloader, prometheus-operator](https://github.com/openshift/prometheus-operator/tree/170b0686e10980d980a3d0a89d023384baff15b6)

* [Bug 2052201](https://bugzilla.redhat.com/show_bug.cgi?id=2052201): Address race condition in recreate flow for statefulset [#167](https://github.com/openshift/prometheus-operator/pull/167)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/086933562820c31dd37399589c136364ec842950...170b0686e10980d980a3d0a89d023384baff15b6)


### [tests](https://github.com/openshift/origin/tree/6ec9a5eb8140ffa64bfb026e763dc77be80fde36)

* [Bug 2101429](https://bugzilla.redhat.com/show_bug.cgi?id=2101429): test: switch to testing CapBnd over CapInh [#27279](https://github.com/openshift/origin/pull/27279)
* [Bug 2064800](https://bugzilla.redhat.com/show_bug.cgi?id=2064800): skip imageregistry serial test on disconnected environments [#27189](https://github.com/openshift/origin/pull/27189)
* [Bug 2077167](https://bugzilla.redhat.com/show_bug.cgi?id=2077167): disable unidling test failing under ovn-k [#27172](https://github.com/openshift/origin/pull/27172)
* [Bug 2087230](https://bugzilla.redhat.com/show_bug.cgi?id=2087230): disable flaky unidling test [#27150](https://github.com/openshift/origin/pull/27150)
* [Bug 2076241](https://bugzilla.redhat.com/show_bug.cgi?id=2076241): Remove second reference to BlueOcean annotations [#27066](https://github.com/openshift/origin/pull/27066)
* [Bug 2076256](https://bugzilla.redhat.com/show_bug.cgi?id=2076256): Remove BlueOcean annotation check [#27038](https://github.com/openshift/origin/pull/27038)
* [Bug 2072902](https://bugzilla.redhat.com/show_bug.cgi?id=2072902): [release-4.9] exclude loki-promtail from duplicated events [#26986](https://github.com/openshift/origin/pull/26986)
* [Bug 2055380](https://bugzilla.redhat.com/show_bug.cgi?id=2055380): cleanup network policy ACL extended test [#26947](https://github.com/openshift/origin/pull/26947)
* [Bug 2063284](https://bugzilla.redhat.com/show_bug.cgi?id=2063284): Add debug info for signature test [#26903](https://github.com/openshift/origin/pull/26903)
* [Bug 2041358](https://bugzilla.redhat.com/show_bug.cgi?id=2041358): images: port image signature workflow test to OCP4/UBI8 [#26751](https://github.com/openshift/origin/pull/26751)
* [Full changelog](https://github.com/openshift/origin/compare/eaa1b2b0ce081eb0a4d87f15377a38dd86a64db5...6ec9a5eb8140ffa64bfb026e763dc77be80fde36)


### [thanos](https://github.com/openshift/thanos/tree/996a5f0be29e1ccc290752091773e6190e9d3bc5)

* [Bug 2074413](https://bugzilla.redhat.com/show_bug.cgi?id=2074413): Thanos Querier high CPU and memory usage till OOM [#81](https://github.com/openshift/thanos/pull/81)
* [Full changelog](https://github.com/openshift/thanos/compare/e0fa82ca4384de82827f6fbb39789451b9243b5f...996a5f0be29e1ccc290752091773e6190e9d3bc5)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/53290ea45cb7cde3ea398da163f9f3dd9d5f0a3d)

* [Bug 2060214](https://bugzilla.redhat.com/show_bug.cgi?id=2060214): Fix stale metrics [#82](https://github.com/openshift/vsphere-problem-detector/pull/82)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/de8606f73f0cb88c8acd81326674a549722abfca...53290ea45cb7cde3ea398da163f9f3dd9d5f0a3d)