# 4.15.0-ec.0

Created: 2023-09-29 14:19:46 +0000 UTC

Image Digest: `sha256:c677e24cf2ad9b23242efcb2f977706a3040dab401255a5371ff216f1d1fd6b7`

Promoted from registry.ci.openshift.org/ocp-s390x/release-s390x:4.15.0-0.nightly-s390x-2023-09-27-065745


## Changes from 4.14.0-ec.4

### Components

* Kubernetes upgraded from 1.27.3 to 1.28.2
* Red Hat Enterprise Linux CoreOS upgraded from 414.92.202307250657-0 to 415.92.202309261919-0


### New images

* [azure-workload-identity-webhook](https://github.com/openshift/kubernetes) git [e3ba6d9f](https://github.com/openshift/kubernetes/commit/e3ba6d9fbe72cd7593325bfa8ab9556a39685f34) `sha256:b33c46c4c88cf7c03c2ad629a9bd28f25600e7c27c0fb4cbd28f535958a12142`


### Rebuilt images without code change

* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [93fba13f](https://github.com/openshift/cluster-bootstrap/commit/93fba13f576831ba0953190663ab26aaf5766984) `sha256:99d9f6c7d8718ef22c57635b415ada9ba41fe97b7ea3e37228e54bb6e9c71ac8`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [cafed17b](https://github.com/openshift/driver-toolkit/commit/cafed17b0c2b4cf8d8310304888787ed7adf7474) `sha256:2a0839f27a5f31e53aafad0822f97e05e937e78273fc02286aec1a886f5ee672`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [ea5a37bb](https://github.com/openshift/cloud-provider-ibm/commit/ea5a37bbb6bf9e340ccd85ce730c6a8545eae4cd) `sha256:c58514d8c433bc246dd5b4969ecb132583fcb34e8d62e23e5991f3290abe4807`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [a7e5c6a5](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/a7e5c6a5b96a3851d1807d4c3f80113a47a4e54d) `sha256:808d1541b03ccbac4ad9fd4a8effd3fa4de4602155ca9115d02cf7c5c949088e`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [86f31e2d](https://github.com/openshift/kube-rbac-proxy/commit/86f31e2de5221ed4acd6509fa7a010a286089f1f) `sha256:a31a92b1ad7772941f560a0219d6e8a933c66e2d04ec7d506309f0aed74d7e93`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [8558e14a](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/8558e14a116804168506d06e96eac5a79913a6eb) `sha256:8f96957ca5d5c10722dd414396d87b51f34802ccc2817f722ca17e85e5b4b505`
* machine-os-content `sha256:c19fd84a50e7263b8a33396924b5f665c2323a29aec9b0ad3467a418b58b7f39`
* [oauth-server](https://github.com/openshift/oauth-server) git [a06e5302](https://github.com/openshift/oauth-server/commit/a06e5302aa7cfc99bd3ab003e3790c36873a181c) `sha256:491eade4a2ea2c6654a314458416d2292f984eb223fc01c33a4e31a4f4dd02b5`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [b9211ed8](https://github.com/openshift/openshift-state-metrics/commit/b9211ed8fa4eb7edfc3d96c6b4843eea6b3337cd) `sha256:8ea04d9e861aea47cd66f23cc4db36eda9a8b8bbbff2246aaac549789c1dc1be`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [f21b470f](https://github.com/openshift/ovirt-csi-driver/commit/f21b470f4927f97eca93a0a390cffccd7d724043) `sha256:97de68fa9060034cee0c9ab145317109bc5af877a295b53479e97d7572a58642`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [2fa33aa7](https://github.com/openshift/ovirt-csi-driver-operator/commit/2fa33aa7f05da8640a8695372364f2367febd12a) `sha256:e58e693d3e5c99d0f6097f2594cd5abf56c4f48bfecf6f05d8c75711855bbc21`
* rhel-coreos `sha256:d8d530b9899522b7fe16a59a6f386e1dbc943b5eac993259a0b67dd15c2f9257`
* rhel-coreos-extensions `sha256:2a13225244a7584dfa98def62f7a3fa73444f019632ce65e5e33328b8c992216`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/f09956b3d46f78158c3d7b5eabbfac1c706da09d)

* Update RHTAP references (#5513) [#5513](https://github.com/openshift/assisted-service/pull/5513)
* Bump OCP versions: 4.14 (#5512) [#5512](https://github.com/openshift/assisted-service/pull/5512)
* NO-ISSUE: Fix email domain for event uploader (#5511) [#5511](https://github.com/openshift/assisted-service/pull/5511)
* Update RHTAP references (#5510) [#5510](https://github.com/openshift/assisted-service/pull/5510)
* Update RHTAP references (#5508) [#5508](https://github.com/openshift/assisted-service/pull/5508)
* Bump OCP versions: 4.12, 4.13 (#5506) [#5506](https://github.com/openshift/assisted-service/pull/5506)
* [MGMT-15808](https://issues.redhat.com/browse/MGMT-15808): change base image to stream9 (#5497) [#5497](https://github.com/openshift/assisted-service/pull/5497)
* [MGMT-15559](https://issues.redhat.com/browse/MGMT-15559): Change detached annotation condition in non-converged flow (#5445) [#5445](https://github.com/openshift/assisted-service/pull/5445)
* [MGMT-15732](https://issues.redhat.com/browse/MGMT-15732): Fix unbound variable (#5493) [#5493](https://github.com/openshift/assisted-service/pull/5493)
* Update RHTAP references (#5492) [#5492](https://github.com/openshift/assisted-service/pull/5492)
* Bump OCP versions: 4.14, 4.11 (#5496) [#5496](https://github.com/openshift/assisted-service/pull/5496)
* Update RHTAP references (#5470) [#5470](https://github.com/openshift/assisted-service/pull/5470)
* [MGMT-15715](https://issues.redhat.com/browse/MGMT-15715): Allow handling multi-document YAML custom manifests (#5480) [#5480](https://github.com/openshift/assisted-service/pull/5480)
* [MGMT-15732](https://issues.redhat.com/browse/MGMT-15732): Add extra flag var for hypershift install (#5469) [#5469](https://github.com/openshift/assisted-service/pull/5469)
* [XMGMT-15704](https://issues.redhat.com/browse/XMGMT-15704): Bugfix for local cluster import (#5484) [#5484](https://github.com/openshift/assisted-service/pull/5484)
* NO-ISSUE: update RHTAP deprecated image check (#5488) [#5488](https://github.com/openshift/assisted-service/pull/5488)
* Bump OCP versions: 4.12, 4.13 (#5483) [#5483](https://github.com/openshift/assisted-service/pull/5483)
* [MGMT-15653](https://issues.redhat.com/browse/MGMT-15653): Fix DNS regex validation (#5482) [#5482](https://github.com/openshift/assisted-service/pull/5482)
* [MGMT-15716](https://issues.redhat.com/browse/MGMT-15716): notify events when updating cluster status (#5476) [#5476](https://github.com/openshift/assisted-service/pull/5476)
* [MGMT-15503](https://issues.redhat.com/browse/MGMT-15503): Update operator bundle channel (#5474) [#5474](https://github.com/openshift/assisted-service/pull/5474)
* Bump OCP versions: 4.14 (#5472) [#5472](https://github.com/openshift/assisted-service/pull/5472)
* [MGMT-15306](https://issues.redhat.com/browse/MGMT-15306): Fix UpdateCluster for requests that include VIPS and UMA (#5462) [#5462](https://github.com/openshift/assisted-service/pull/5462)
* [MGMT-15704](https://issues.redhat.com/browse/MGMT-15704): One typo and one missing piece of config, discovered after MGMT-15704 merged (#5465) [#5465](https://github.com/openshift/assisted-service/pull/5465)
* Bump OCP versions: 4.12 (#5467) [#5467](https://github.com/openshift/assisted-service/pull/5467)
* [MGMT-15653](https://issues.redhat.com/browse/MGMT-15653): Validate domain in one place (#5451) [#5451](https://github.com/openshift/assisted-service/pull/5451)
* [MGMT-15704](https://issues.redhat.com/browse/MGMT-15704): Assisted service should create Day2 import CR for hub cluster. (#5459) [#5459](https://github.com/openshift/assisted-service/pull/5459)
* [MGMT-15340](https://issues.redhat.com/browse/MGMT-15340): Ensure vlan interface names will be <= 15 characters (#5389) [#5389](https://github.com/openshift/assisted-service/pull/5389)
* NO-ISSUE: Add subsystem tests to platform support level (#5460) [#5460](https://github.com/openshift/assisted-service/pull/5460)
* Bump OCP versions: 4.10 (#5463) [#5463](https://github.com/openshift/assisted-service/pull/5463)
* Bump OCP versions: 4.13 (#5457) [#5457](https://github.com/openshift/assisted-service/pull/5457)
* Bump OCP versions: 4.13, 4.11, 4.12 (#5454) [#5454](https://github.com/openshift/assisted-service/pull/5454)
* [MGMT-11456](https://issues.redhat.com/browse/MGMT-11456): Bugfix - remove redundant code (#5372) [#5372](https://github.com/openshift/assisted-service/pull/5372)
* Bump OCP versions: 4.11, 4.12, 4.13 (#5452) [#5452](https://github.com/openshift/assisted-service/pull/5452)
* [AGENT-694](https://issues.redhat.com/browse/AGENT-694): Support external platform type for agent installer (#5438) [#5438](https://github.com/openshift/assisted-service/pull/5438)
* [MGMT-15100](https://issues.redhat.com/browse/MGMT-15100): Remove unused feature-support-levels API endpoint (#5450) [#5450](https://github.com/openshift/assisted-service/pull/5450)
* Update RHTAP references (#5410) [#5410](https://github.com/openshift/assisted-service/pull/5410)
* Fix setup_env.sh failure handling (#5442) [#5442](https://github.com/openshift/assisted-service/pull/5442)
* Add BMH annotation keys to docs (#5444) [#5444](https://github.com/openshift/assisted-service/pull/5444)
* OCPBUGS-17992 day2 skip install config overrides (#5439) [#5439](https://github.com/openshift/assisted-service/pull/5439)
* Bump OCP versions: 4.12, 4.10 (#5441) [#5441](https://github.com/openshift/assisted-service/pull/5441)
* [MGMT-14881](https://issues.redhat.com/browse/MGMT-14881): return a valid error when no disks has been found (#5430) [#5430](https://github.com/openshift/assisted-service/pull/5430)
* [MGMT-15595](https://issues.redhat.com/browse/MGMT-15595): Make client a separate go module (#5434) [#5434](https://github.com/openshift/assisted-service/pull/5434)
* [MGMT-15177](https://issues.redhat.com/browse/MGMT-15177): Align feature support level to support platform as filterable feature (#5424) [#5424](https://github.com/openshift/assisted-service/pull/5424)
* Bump OCP versions: 4.12 (#5432) [#5432](https://github.com/openshift/assisted-service/pull/5432)
* Bump OCP versions: 4.11, 4.13 (#5431) [#5431](https://github.com/openshift/assisted-service/pull/5431)
* Use go 1.18 when setting up environment (#5422) [#5422](https://github.com/openshift/assisted-service/pull/5422)
* NO-ISSUE: Bump k8s.io/klog/v2 from 2.70.1 to 2.100.1 (#5428) [#5428](https://github.com/openshift/assisted-service/pull/5428)
* [MGMT-15356](https://issues.redhat.com/browse/MGMT-15356): Ensure filenames are distinct between openshift and manifest (#5382) [#5382](https://github.com/openshift/assisted-service/pull/5382)
* [MGMT-15491](https://issues.redhat.com/browse/MGMT-15491): Validate vSphere disk.EnableUUID ignoring cluster platform (#5416) [#5416](https://github.com/openshift/assisted-service/pull/5416)
* NO-ISSUE: Extend waiting time to test DB container to be ready (#5425) [#5425](https://github.com/openshift/assisted-service/pull/5425)
* Bump OCP versions: 4.10 (#5423) [#5423](https://github.com/openshift/assisted-service/pull/5423)
* Bump OCP versions: 4.13, 4.12 (#5421) [#5421](https://github.com/openshift/assisted-service/pull/5421)
* [OCPBUGS-17415](https://issues.redhat.com/browse/OCPBUGS-17415): Bump golang.org/x/net (#5417) [#5417](https://github.com/openshift/assisted-service/pull/5417)
* [MGMT-14933](https://issues.redhat.com/browse/MGMT-14933): Validate hosts running in OCI (#5413) [#5413](https://github.com/openshift/assisted-service/pull/5413)
* Ensure inspection is disabled on day-2 spoke node BMHs (#5406) [#5406](https://github.com/openshift/assisted-service/pull/5406)
* [MGMT-15423](https://issues.redhat.com/browse/MGMT-15423): Change the user message from: 'Host is not compatible with cluster platform %s; either disable this host or choose a compatible cluster platform (%v)' to 'Host is not compatible with cluster platform %s; either disable this host or discover a new, compatible host.' (#5412) [#5412](https://github.com/openshift/assisted-service/pull/5412)
* Don't set detached for BMHs without infraenv label (#5414) [#5414](https://github.com/openshift/assisted-service/pull/5414)
* [RHTAPBUGS-318](https://issues.redhat.com/browse/RHTAPBUGS-318): Fetch tag in RHTAP build (#5333) [#5333](https://github.com/openshift/assisted-service/pull/5333)
* [MGMT-15424](https://issues.redhat.com/browse/MGMT-15424): parametrize envoy configmap name (#5411) [#5411](https://github.com/openshift/assisted-service/pull/5411)
* Bump OCP versions: 4.12 (#5409) [#5409](https://github.com/openshift/assisted-service/pull/5409)
* Bump OCP versions: 4.11 (#5407) [#5407](https://github.com/openshift/assisted-service/pull/5407)
* [MGMT-15335](https://issues.redhat.com/browse/MGMT-15335): Fix missing state when trying to update to not supported platform (#5399) [#5399](https://github.com/openshift/assisted-service/pull/5399)
* Bump OCP versions: 4.14 (#5403) [#5403](https://github.com/openshift/assisted-service/pull/5403)
* Update RHTAP references (#5387) [#5387](https://github.com/openshift/assisted-service/pull/5387)
* [MGMT-15389](https://issues.redhat.com/browse/MGMT-15389): add feature flag to enable/disable OKD support (#5400) [#5400](https://github.com/openshift/assisted-service/pull/5400)
* [MGMT-11949](https://issues.redhat.com/browse/MGMT-11949): MGMT-12278: Update libksba and libxml2 (#5398) [#5398](https://github.com/openshift/assisted-service/pull/5398)
* [MGMT-15388](https://issues.redhat.com/browse/MGMT-15388): Remove unsupported platforms from the supported-platforms endpoint (#5394) [#5394](https://github.com/openshift/assisted-service/pull/5394)
* [AGENT-557](https://issues.redhat.com/browse/AGENT-557): Split register into registerCluster and registerInfraEnv (#5376) [#5376](https://github.com/openshift/assisted-service/pull/5376)
* [MGMT-15339](https://issues.redhat.com/browse/MGMT-15339): Run network config before NetworkManager (#5375) [#5375](https://github.com/openshift/assisted-service/pull/5375)
* [MGMT-15128](https://issues.redhat.com/browse/MGMT-15128): Remove control plane machine set so that control-plane-machine-set operator would not go degraded due to placeholder credentials on installation. (#5378) [#5378](https://github.com/openshift/assisted-service/pull/5378)
* [MGMT-15047](https://issues.redhat.com/browse/MGMT-15047): use installer to deploy on external platform (#5381) [#5381](https://github.com/openshift/assisted-service/pull/5381)
* [MGMT-15343](https://issues.redhat.com/browse/MGMT-15343): dependabot remove docker (#5392) [#5392](https://github.com/openshift/assisted-service/pull/5392)
* Bump OCP versions: 4.13, 4.10 (#5391) [#5391](https://github.com/openshift/assisted-service/pull/5391)
* Don't attempt to contact spoke while unbinding a day2 host (#5383) [#5383](https://github.com/openshift/assisted-service/pull/5383)
* Update RHTAP references (#5374) [#5374](https://github.com/openshift/assisted-service/pull/5374)
* [MGMT-15128](https://issues.redhat.com/browse/MGMT-15128): Remove control plane machine set so that control-plane-machine-set operator would not go degraded due to placeholder credentials on installation. (#5364) [#5364](https://github.com/openshift/assisted-service/pull/5364)
* Bump OCP versions: 4.12 (#5384) [#5384](https://github.com/openshift/assisted-service/pull/5384)
* [MGMT-14793](https://issues.redhat.com/browse/MGMT-14793): Assisted discovery core and root user shell should have (#5373) [#5373](https://github.com/openshift/assisted-service/pull/5373)
* [Full changelog](https://github.com/openshift/assisted-service/compare/4ed82292c5a78662aa9f49258807f0a6baceaf38...f09956b3d46f78158c3d7b5eabbfac1c706da09d)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/15a57d1c7a455961f538b7a35455b643d66efa50)

* [MGMT-15810](https://issues.redhat.com/browse/MGMT-15810): change base image to stream9 (#725) [#725](https://github.com/openshift/assisted-installer/pull/725)
* NO-ISSUE: fix dependabot ingored packages (#724) [#724](https://github.com/openshift/assisted-installer/pull/724)
* NO-ISSUE: dependabot exclude k8s (#706) [#706](https://github.com/openshift/assisted-installer/pull/706)
* [OCPBUGS-16482](https://issues.redhat.com/browse/OCPBUGS-16482): bump golangci-lint to 1.53.1 (#702) [#702](https://github.com/openshift/assisted-installer/pull/702)
* [OCPBUGS-4240](https://issues.redhat.com/browse/OCPBUGS-4240): allow controller to complete for agent-based installs (#700) [#700](https://github.com/openshift/assisted-installer/pull/700)
* [MGMT-15235](https://issues.redhat.com/browse/MGMT-15235): Compile with CGO_ENABLED=1 for amd64 (#699) [#699](https://github.com/openshift/assisted-installer/pull/699)
* Revert "MGMT-15235: Compile with CGO_ENABLED=1 for FIPS (#683)" (#693) [#683](https://github.com/openshift/assisted-installer/pull/683)
* [OCPBUGS-17252](https://issues.redhat.com/browse/OCPBUGS-17252): Bump golang.org/x/net/html (#695) [#695](https://github.com/openshift/assisted-installer/pull/695)
* Updating ose-agent-installer-orchestrator images to be consistent with ART (#652) [#652](https://github.com/openshift/assisted-installer/pull/652)
* [MGMT-15343](https://issues.redhat.com/browse/MGMT-15343): dependabot group updates (#692) [#692](https://github.com/openshift/assisted-installer/pull/692)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/aaf27e51e60445a588ed5cea994ae7f541ad98ed...15a57d1c7a455961f538b7a35455b643d66efa50)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/8850b6c0d74750c403ae0675757affe54b24de72)

* Updating ose-agent-installer-node-agent images to be consistent with ART (#603) [#603](https://github.com/openshift/assisted-installer-agent/pull/603)
* [OCPBUGS-16482](https://issues.redhat.com/browse/OCPBUGS-16482): bump golangci-lint to v1.53.1 (#591) [#591](https://github.com/openshift/assisted-installer-agent/pull/591)
* NO-ISSUE: fix lint target and code (#605) [#605](https://github.com/openshift/assisted-installer-agent/pull/605)
* [MGMT-15653](https://issues.redhat.com/browse/MGMT-15653): Update domain validation from assisted-service changes (#599) [#599](https://github.com/openshift/assisted-installer-agent/pull/599)
* NO-ISSUE: Bump the go-dependencies group with 1 update (#597) [#597](https://github.com/openshift/assisted-installer-agent/pull/597)
* NO-ISSUE: Bump the go-dependencies group with 5 updates (#595) [#595](https://github.com/openshift/assisted-installer-agent/pull/595)
* [MGMT-15661](https://issues.redhat.com/browse/MGMT-15661): Update to latest ghw version (#594) [#594](https://github.com/openshift/assisted-installer-agent/pull/594)
* [MGMT-15235](https://issues.redhat.com/browse/MGMT-15235): Allow setting CGO_ENABLED flag (#589) [#589](https://github.com/openshift/assisted-installer-agent/pull/589)
* [MGMT-15235](https://issues.redhat.com/browse/MGMT-15235): Compile with CGO_ENABLED=1 for amd64 (#588) [#588](https://github.com/openshift/assisted-installer-agent/pull/588)
* Revert "MGMT-15235: Compile with CGO_ENABLED=1 for FIPS (#569)" (#582) [#569](https://github.com/openshift/assisted-installer-agent/pull/569)
* [OCPBUGS-17251](https://issues.redhat.com/browse/OCPBUGS-17251): Bumping golang.org/x/net (#586) [#586](https://github.com/openshift/assisted-installer-agent/pull/586)
* [MGMT-14933](https://issues.redhat.com/browse/MGMT-14933): Detect if the host in running in OCI (#585) [#585](https://github.com/openshift/assisted-installer-agent/pull/585)
* [MGMT-15359](https://issues.redhat.com/browse/MGMT-15359): support appliance multipath virtual device (#584) [#584](https://github.com/openshift/assisted-installer-agent/pull/584)
* [MGMT-13111](https://issues.redhat.com/browse/MGMT-13111): Freeze on `404 Not Found` (#583) [#583](https://github.com/openshift/assisted-installer-agent/pull/583)
* [MGMT-15343](https://issues.redhat.com/browse/MGMT-15343): dependabot remove docker (#581) [#581](https://github.com/openshift/assisted-installer-agent/pull/581)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/0c86a8dfba03c5da381ef1412288d85a38fe66f7...8850b6c0d74750c403ae0675757affe54b24de72)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/8bc5db751e3e53224235f50a0508aeeab52f6bc3)

* [OCPBUGS-19219](https://issues.redhat.com/browse/OCPBUGS-19219): Updating ose-agent-installer-utils images to be consistent with ART [#29](https://github.com/openshift/agent-installer-utils/pull/29)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/ad8537697818870b53b6262041f0dfa78a3b41c2...8bc5db751e3e53224235f50a0508aeeab52f6bc3)


### [alibaba-cloud-controller-manager, alibaba-cloud-csi-driver, alibaba-disk-csi-driver-operator, alibaba-machine-controllers, aws-cloud-controller-manager, aws-cluster-api-controllers, aws-ebs-csi-driver, aws-ebs-csi-driver-operator, aws-machine-controllers, aws-pod-identity-webhook, azure-cloud-controller-manager, azure-cloud-node-manager, azure-cluster-api-controllers, azure-disk-csi-driver, azure-disk-csi-driver-operator, azure-file-csi-driver, azure-file-csi-driver-operator, azure-machine-controllers, csi-driver-manila, csi-driver-manila-operator, csi-driver-nfs, gcp-cloud-controller-manager, gcp-cluster-api-controllers, gcp-machine-controllers, gcp-pd-csi-driver, gcp-pd-csi-driver-operator, hyperkube, ironic, ironic-agent, ironic-machine-os-downloader, ironic-static-ip-manager, kuryr-cni, kuryr-controller, machine-image-customization-controller, machine-os-images, nutanix-cloud-controller-manager, nutanix-machine-controllers, pod, powervs-block-csi-driver, powervs-block-csi-driver-operator, powervs-cloud-controller-manager, powervs-machine-controllers, vsphere-cloud-controller-manager, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector](https://github.com/openshift/kubernetes/tree/e3ba6d9fbe72cd7593325bfa8ab9556a39685f34)

* UPSTREAM: 120817: e2e: bootstrap vsphere tests earlier [#1714](https://github.com/openshift/kubernetes/pull/1714)
* [OCPBUGS-19452](https://issues.redhat.com/browse/OCPBUGS-19452): UPSTREAM: 119317: change rolling update logic to exclude sunsetting nodes [#1716](https://github.com/openshift/kubernetes/pull/1716)
* Update to new openshift/* dependencies [#1704](https://github.com/openshift/kubernetes/pull/1704)
* [STOR-1425](https://issues.redhat.com/browse/STOR-1425): Update to Kubernetes 1.28.1 [#1646](https://github.com/openshift/kubernetes/pull/1646)
* [OCPBUGS-16080](https://issues.redhat.com/browse/OCPBUGS-16080): UPSTREAM: <carry>: watch-termination: termination.log file [#1638](https://github.com/openshift/kubernetes/pull/1638)
* UPSTREAM: <carry>: disable test removed in 1.28 [#1698](https://github.com/openshift/kubernetes/pull/1698)
* <carry>: Export cpu stats of ovs.slice via prometheus [#1686](https://github.com/openshift/kubernetes/pull/1686)
* [OCPBUGS-17654](https://issues.redhat.com/browse/OCPBUGS-17654): cm: reorder setting of sched_load_balance for sandbox slice [#1665](https://github.com/openshift/kubernetes/pull/1665)
* [OCPBUGS-18608](https://issues.redhat.com/browse/OCPBUGS-18608): UPSTREAM: <carry>: Force using host go always and use host libriaries [#1688](https://github.com/openshift/kubernetes/pull/1688)
* [OCPBUGS-18149](https://issues.redhat.com/browse/OCPBUGS-18149): UPSTREAM: <carry>: retry etcd Unavailable errors [#1681](https://github.com/openshift/kubernetes/pull/1681)
* [OCPBUGS-18149](https://issues.redhat.com/browse/OCPBUGS-18149): UPSTREAM: <carry>: retry etcd Unavailable errors [#1676](https://github.com/openshift/kubernetes/pull/1676)
* [OCPBUGS-14301](https://issues.redhat.com/browse/OCPBUGS-14301): UPSTREAM: 117245: Fix TopologyAwareHint not working when zone label is added after Node creation [#1673](https://github.com/openshift/kubernetes/pull/1673)
* [OCPBUGS-14301](https://issues.redhat.com/browse/OCPBUGS-14301): UPSTREAM: 117249,118189: fix TopologyCache crashes [#1668](https://github.com/openshift/kubernetes/pull/1668)
* [OCPBUGS-7415](https://issues.redhat.com/browse/OCPBUGS-7415): grant user:full scope to self-SARs [#1493](https://github.com/openshift/kubernetes/pull/1493)
* UPSTREAM: 118280: Set all PSa labels in tests [#1663](https://github.com/openshift/kubernetes/pull/1663)
* [OCPBUGS-17119](https://issues.redhat.com/browse/OCPBUGS-17119): UPSTREAM: <drop>: bump apiserver-library-go for updated required-scc errors [#1661](https://github.com/openshift/kubernetes/pull/1661)
* [OCPBUGS-15726](https://issues.redhat.com/browse/OCPBUGS-15726): UPSTREAM: <carry>: merge v3 openapi discovery and specs for special groups [#1654](https://github.com/openshift/kubernetes/pull/1654)
* [OCPBUGS-16166](https://issues.redhat.com/browse/OCPBUGS-16166): Update to Kubernetes 1.27.4 [#1660](https://github.com/openshift/kubernetes/pull/1660)
* Update to Kubernetes 1.27.4 [#1653](https://github.com/openshift/kubernetes/pull/1653)
* [OCPBUGS-15726](https://issues.redhat.com/browse/OCPBUGS-15726): UPSTREAM: 118879: make apiservices.apiregistration.k8s.io discoverabl… [#1630](https://github.com/openshift/kubernetes/pull/1630)
* [OCPBUGS-16166](https://issues.redhat.com/browse/OCPBUGS-16166): Update to Kubernetes 1.27.4 [#1645](https://github.com/openshift/kubernetes/pull/1645)
* [Full changelog](https://github.com/openshift/kubernetes/compare/4aaeaec06c95e0a1a868695792c256d8f0158075...e3ba6d9fbe72cd7593325bfa8ab9556a39685f34)


### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/f1e6d94ca51afe169bc038acb0b06cedea16d617)

* [OCPBUGS-19266](https://issues.redhat.com/browse/OCPBUGS-19266): Updating ose-apiserver-network-proxy images to be consistent with ART [#33](https://github.com/openshift/apiserver-network-proxy/pull/33)
* [OCPBUGS-10187](https://issues.redhat.com/browse/OCPBUGS-10187): Updating ose-apiserver-network-proxy images to be consistent with ART [#30](https://github.com/openshift/apiserver-network-proxy/pull/30)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/61e198ca00b9426e2f7309cf2818ac74426486ff...f1e6d94ca51afe169bc038acb0b06cedea16d617)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/4ce62d15df6b6d5850225796dfb1445688ec2b8e)

* [OCPBUGS-18986](https://issues.redhat.com/browse/OCPBUGS-18986): Tag aws instance profiles. [#7510](https://github.com/openshift/installer/pull/7510)
* [OCPBUGS-19376](https://issues.redhat.com/browse/OCPBUGS-19376): GCP default value for service account [#7519](https://github.com/openshift/installer/pull/7519)
* [MULTIARCH-3701](https://issues.redhat.com/browse/MULTIARCH-3701): Enable ppc64le for agent installer [#7366](https://github.com/openshift/installer/pull/7366)
* pkg/asset/installconfig/powervs: fix dropped error [#7419](https://github.com/openshift/installer/pull/7419)
* [OCPBUGS-19699](https://issues.redhat.com/browse/OCPBUGS-19699): Remove warning about CPUPartitioning [#7527](https://github.com/openshift/installer/pull/7527)
* [OCPBUGS-18187](https://issues.redhat.com/browse/OCPBUGS-18187): Increase bootstrap timeout for vSphere platform by 30 mins [#7518](https://github.com/openshift/installer/pull/7518)
* [OCPBUGS-18830](https://issues.redhat.com/browse/OCPBUGS-18830): AWS terraform bootstrap destroy will not refresh state [#7491](https://github.com/openshift/installer/pull/7491)
* [OCPBUGS-12707](https://issues.redhat.com/browse/OCPBUGS-12707): always write AWS cloud.conf [#7514](https://github.com/openshift/installer/pull/7514)
* [AGENT-710](https://issues.redhat.com/browse/AGENT-710): Use invoker for bootstrap template generation [#7508](https://github.com/openshift/installer/pull/7508)
* [OCPBUGS-18876](https://issues.redhat.com/browse/OCPBUGS-18876): Pass CPUPartitioning via install-config overrides if set [#7513](https://github.com/openshift/installer/pull/7513)
* OpenStack: fix IPv6 docs [#7482](https://github.com/openshift/installer/pull/7482)
* [OCPBUGS-18945](https://issues.redhat.com/browse/OCPBUGS-18945): update RHCOS 4.15 bootimage metadata to 415.92.202309161058-0 [#7499](https://github.com/openshift/installer/pull/7499)
* LICENSE: Update [#7502](https://github.com/openshift/installer/pull/7502)
* [OCPBUGS-19286](https://issues.redhat.com/browse/OCPBUGS-19286): Updating ose-installer-artifacts images to be consistent with ART [#7496](https://github.com/openshift/installer/pull/7496)
* [SPLAT-1170](https://issues.redhat.com/browse/SPLAT-1170): enable cloud controller manager type to be defined [#7457](https://github.com/openshift/installer/pull/7457)
* OpenStack: Set external network for cloud-provider [#7411](https://github.com/openshift/installer/pull/7411)
* [OCPBUGS-17724](https://issues.redhat.com/browse/OCPBUGS-17724): Graceful fail for AWS getUser on destroy [#7429](https://github.com/openshift/installer/pull/7429)
* AGENT: publish services diagrams [#7323](https://github.com/openshift/installer/pull/7323)
* [OCPBUGS-19149](https://issues.redhat.com/browse/OCPBUGS-19149): Updating ose-baremetal-installer images to be consistent with ART [#7494](https://github.com/openshift/installer/pull/7494)
* [OCPBUGS-19130](https://issues.redhat.com/browse/OCPBUGS-19130): Updating ose-installer images to be consistent with ART [#7493](https://github.com/openshift/installer/pull/7493)
* [OCPBUGS-17218](https://issues.redhat.com/browse/OCPBUGS-17218): Warn when firewall rull missing. [#7417](https://github.com/openshift/installer/pull/7417)
* [OSASINFRA-3236](https://issues.redhat.com/browse/OSASINFRA-3236): deps: Bump gophercloud to v1.6.0 [#7208](https://github.com/openshift/installer/pull/7208)
* [OCPBUGS-19037](https://issues.redhat.com/browse/OCPBUGS-19037): Handle agent tui failure gracefully [#7490](https://github.com/openshift/installer/pull/7490)
* [OCPBUGS-19017](https://issues.redhat.com/browse/OCPBUGS-19017): Add Net capabilities to dnsmasq container [#7487](https://github.com/openshift/installer/pull/7487)
* [OCPBUGS-18113](https://issues.redhat.com/browse/OCPBUGS-18113): Do not set FailureDomains on CPMS when in a single zone Azure region [#7448](https://github.com/openshift/installer/pull/7448)
* [AGENT-702](https://issues.redhat.com/browse/AGENT-702): Generate minimal ISO for external platform [#7450](https://github.com/openshift/installer/pull/7450)
* [OCPBUGS-18304](https://issues.redhat.com/browse/OCPBUGS-18304): for vsphere ipi add cluster domain to the uploaded vm configs so that… [#7451](https://github.com/openshift/installer/pull/7451)
* Implement workaround to allow SNO installations for OKD/FCOS [#7445](https://github.com/openshift/installer/pull/7445)
* [OCPBUGS-18428](https://issues.redhat.com/browse/OCPBUGS-18428): Add ip=dhcp,dhcp6 kernel param for vSphere dual-stack [#7467](https://github.com/openshift/installer/pull/7467)
* [OSDOCS-6999](https://issues.redhat.com/browse/OSDOCS-6999): tested machine series 'C3', 'C2D' [#7381](https://github.com/openshift/installer/pull/7381)
* [OCPBUGS-18450](https://issues.redhat.com/browse/OCPBUGS-18450): AWS permission missing for security group viewing. [#7460](https://github.com/openshift/installer/pull/7460)
* [OCPBUGS-18365](https://issues.redhat.com/browse/OCPBUGS-18365): Fix defaulting of userManagedNetworking value [#7458](https://github.com/openshift/installer/pull/7458)
* integration tests: Swap order of diff arguments [#7462](https://github.com/openshift/installer/pull/7462)
* [AGENT-693](https://issues.redhat.com/browse/AGENT-693): Support external platform [#7442](https://github.com/openshift/installer/pull/7442)
* [OCPBUGS-18457](https://issues.redhat.com/browse/OCPBUGS-18457): Make extracting ISO kargs more robust [#7463](https://github.com/openshift/installer/pull/7463)
* [OCPBUGS-18457](https://issues.redhat.com/browse/OCPBUGS-18457): Fix PXE integration tests [#7461](https://github.com/openshift/installer/pull/7461)
* [OCPBUGS-17806](https://issues.redhat.com/browse/OCPBUGS-17806): gomod: bump openshift/api version [#7421](https://github.com/openshift/installer/pull/7421)
* [OCPBUGS-17770](https://issues.redhat.com/browse/OCPBUGS-17770): azure: use marketplace image plan's publisher [#7426](https://github.com/openshift/installer/pull/7426)
* [OCPBUGS-7690](https://issues.redhat.com/browse/OCPBUGS-7690): azure: destroy: dns records leak if permissions missing [#7433](https://github.com/openshift/installer/pull/7433)
* [OCPBUGS-17869](https://issues.redhat.com/browse/OCPBUGS-17869): azure: fix setting outboundType [#7455](https://github.com/openshift/installer/pull/7455)
* [OSDOCS-6880](https://issues.redhat.com/browse/OSDOCS-6880): Adding 64-bit ARM GCP instance types to documentation [#7320](https://github.com/openshift/installer/pull/7320)
* [OCPBUGS-16204](https://issues.redhat.com/browse/OCPBUGS-16204): aws: attach additional security groups to controlPlane [#7352](https://github.com/openshift/installer/pull/7352)
* [OCPBUGS-18046](https://issues.redhat.com/browse/OCPBUGS-18046): update govc version to v0.30.7 [#7425](https://github.com/openshift/installer/pull/7425)
* [OCPBUGS-15659](https://issues.redhat.com/browse/OCPBUGS-15659): IPI pre-check for MachineAPI capability [#7414](https://github.com/openshift/installer/pull/7414)
* [OCPBUGS-17860](https://issues.redhat.com/browse/OCPBUGS-17860): OpenStack: Remove NodePorts range 0.0.0.0/0 rules [#7405](https://github.com/openshift/installer/pull/7405)
* [OCPBUGS-17073](https://issues.redhat.com/browse/OCPBUGS-17073): Revert "Merge pull request #7205 from rna-afk/azure_managed_by_tag" [#7412](https://github.com/openshift/installer/pull/7412)
* [OCPBUGS-17940](https://issues.redhat.com/browse/OCPBUGS-17940): Add COS endpoint to proxy server (Power VS) [#7430](https://github.com/openshift/installer/pull/7430)
* [AGENT-692](https://issues.redhat.com/browse/AGENT-692), [OCPBUGS-3860](https://issues.redhat.com/browse/OCPBUGS-3860): Update assisted-service dependencies [#7439](https://github.com/openshift/installer/pull/7439)
* [OCPBUGS-17227](https://issues.redhat.com/browse/OCPBUGS-17227): gcp: fix validation of custom instance types [#7388](https://github.com/openshift/installer/pull/7388)
* [OCPBUGS-17869](https://issues.redhat.com/browse/OCPBUGS-17869): azure: put NAT gateway behind TechPreviewNoUpgrade [#7434](https://github.com/openshift/installer/pull/7434)
* Destroy startironic.sh forever [#7250](https://github.com/openshift/installer/pull/7250)
* [CORS-2660](https://issues.redhat.com/browse/CORS-2660): GCP: deprecate the licenses field [#7397](https://github.com/openshift/installer/pull/7397)
* [CFE-858](https://issues.redhat.com/browse/CFE-858): Update google terraform provider to latest version [#7201](https://github.com/openshift/installer/pull/7201)
* [MULTIARCH-3676](https://issues.redhat.com/browse/MULTIARCH-3676): PowerVS TG terraform changes [#7389](https://github.com/openshift/installer/pull/7389)
* [CFE-686](https://issues.redhat.com/browse/CFE-686): Generate Infrastructure CR with the GCP user defined tags & labels [#7138](https://github.com/openshift/installer/pull/7138)
* [CFE-687](https://issues.redhat.com/browse/CFE-687): Apply user defined labels on created gcp resources [#7153](https://github.com/openshift/installer/pull/7153)
* [OCPBUGS-11999](https://issues.redhat.com/browse/OCPBUGS-11999): upkeep: updated description to remove techpreview [#7313](https://github.com/openshift/installer/pull/7313)
* [CORS-2700](https://issues.redhat.com/browse/CORS-2700): Make bootstrap S3 bucket optional during bootstrap destroy [#7288](https://github.com/openshift/installer/pull/7288)
* [CFE-688](https://issues.redhat.com/browse/CFE-688): Update install-config CRD to support gcp labels and tags [#7126](https://github.com/openshift/installer/pull/7126)
* [OCPBUGS-16776](https://issues.redhat.com/browse/OCPBUGS-16776): update RHCOS 4.14 bootimage metadata to 414.92.202308032115-0 [#7409](https://github.com/openshift/installer/pull/7409)
* Add baremetal capability validation [#7394](https://github.com/openshift/installer/pull/7394)
* azure: validation: machinepool: sort slice before comparing [#7407](https://github.com/openshift/installer/pull/7407)
* [OCPBUGS-13408](https://issues.redhat.com/browse/OCPBUGS-13408): Log message and add integration test [#7408](https://github.com/openshift/installer/pull/7408)
* PowerVS: Update listCOSInstances to continue querying [#7404](https://github.com/openshift/installer/pull/7404)
* maintenance: update openshift/api [#7401](https://github.com/openshift/installer/pull/7401)
* [MGMT-13628](https://issues.redhat.com/browse/MGMT-13628): add support for confidential VMs on Azure [#7312](https://github.com/openshift/installer/pull/7312)
* openstack: Test zero replicas in worker machine-pool [#7400](https://github.com/openshift/installer/pull/7400)
* OpenStack: Fix user docs for additional network with IPv6 [#7395](https://github.com/openshift/installer/pull/7395)
* gather: Use `journalctl -o with-unit` [#7371](https://github.com/openshift/installer/pull/7371)
* [SPLAT-1123](https://issues.redhat.com/browse/SPLAT-1123): Revert Alibaba deprecation warning [#7396](https://github.com/openshift/installer/pull/7396)
* [OCPBUGS-15994](https://issues.redhat.com/browse/OCPBUGS-15994): Update core password after loading config-image [#7338](https://github.com/openshift/installer/pull/7338)
* OpenStack: Remove SGS created by CPO on destroy [#7378](https://github.com/openshift/installer/pull/7378)
* data/data/coreos: bump FCOS to F38 stable [#7311](https://github.com/openshift/installer/pull/7311)
* [OCPBUGS-16912](https://issues.redhat.com/browse/OCPBUGS-16912): Ensure DHCPv6 client sends Solicit with mac address [#7384](https://github.com/openshift/installer/pull/7384)
* Bug OCPBUGS-16249: Add ip=dhcp,dhcp6 option to Kernel args [#7367](https://github.com/openshift/installer/pull/7367)
* PowerVS: Check whether Machine pool CIDR is /24 [#6903](https://github.com/openshift/installer/pull/6903)
* [OCPBUGS-16292](https://issues.redhat.com/browse/OCPBUGS-16292): GCP XPN: clarify service account support [#7347](https://github.com/openshift/installer/pull/7347)
* [OCPBUGS-6759](https://issues.redhat.com/browse/OCPBUGS-6759): Fix discrepancy with disk size master [#7100](https://github.com/openshift/installer/pull/7100)
* [OCPBUGS-16959](https://issues.redhat.com/browse/OCPBUGS-16959): openstack/upi: add missing modules namespaces + doc [#7373](https://github.com/openshift/installer/pull/7373)
* [CORS-2719](https://issues.redhat.com/browse/CORS-2719): Remove service account user permission [#7291](https://github.com/openshift/installer/pull/7291)
* [OCPBUGS-17064](https://issues.redhat.com/browse/OCPBUGS-17064): always create a MachineSet [#7380](https://github.com/openshift/installer/pull/7380)
* OpenStack: Fix default for openstack_worker_server_group_names [#7359](https://github.com/openshift/installer/pull/7359)
* [OCPBUGS-16692](https://issues.redhat.com/browse/OCPBUGS-16692): OpenStack: fix crash with empty platform in machinepool [#7363](https://github.com/openshift/installer/pull/7363)
* [CORS-2445](https://issues.redhat.com/browse/CORS-2445): GCP add bootimage override in install-config [#7215](https://github.com/openshift/installer/pull/7215)
* [CORS-2503](https://issues.redhat.com/browse/CORS-2503): azure: use marketplace images for all nodes [#6890](https://github.com/openshift/installer/pull/6890)
* [MULTIARCH-3676](https://issues.redhat.com/browse/MULTIARCH-3676): PowerVS add transit gateway destroy [#7294](https://github.com/openshift/installer/pull/7294)
* [CORS-1770](https://issues.redhat.com/browse/CORS-1770): Support pd-balanced disk types for GCP deployments [#7337](https://github.com/openshift/installer/pull/7337)
* [OCPBUGS-15989](https://issues.redhat.com/browse/OCPBUGS-15989): vSphere - bump terraform provider [#7354](https://github.com/openshift/installer/pull/7354)
* OWNERS_ALIASES: Add new user to owners_aliases [#7348](https://github.com/openshift/installer/pull/7348)
* [OCPBUGS-16515](https://issues.redhat.com/browse/OCPBUGS-16515): gcp: use zones available for both instance and project [#7317](https://github.com/openshift/installer/pull/7317)
* [OCPBUGS-15852](https://issues.redhat.com/browse/OCPBUGS-15852): Single node cannot be installed if etcd appears in the hostname [#7304](https://github.com/openshift/installer/pull/7304)
* [OCPBUGS-14877](https://issues.redhat.com/browse/OCPBUGS-14877): Validate that number hosts does not exceed replicas [#7268](https://github.com/openshift/installer/pull/7268)
* [CORS-2628](https://issues.redhat.com/browse/CORS-2628): Allow users to set ManagedBy tag to resource group [#7205](https://github.com/openshift/installer/pull/7205)
* [OCPBUGS-16380](https://issues.redhat.com/browse/OCPBUGS-16380): Add /etc/containers volume on create-cluster-and-infraenv [#7332](https://github.com/openshift/installer/pull/7332)
* [OCPBUGS-16207](https://issues.redhat.com/browse/OCPBUGS-16207): ic: aws: validate max security groups [#7345](https://github.com/openshift/installer/pull/7345)
* OpenStack: Add steps to enable dual-stack clusters [#7269](https://github.com/openshift/installer/pull/7269)
* [Full changelog](https://github.com/openshift/installer/compare/bd102cad5bf26ca7a1942b8e69c64de2efd52f1c...4ce62d15df6b6d5850225796dfb1445688ec2b8e)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/43617f25e9edcb5ee73d76d54495755bc7ec89e6)

* [OCPBUGS-19178](https://issues.redhat.com/browse/OCPBUGS-19178): Updating baremetal-machine-controller images to be consistent with ART [#196](https://github.com/openshift/cluster-api-provider-baremetal/pull/196)
* [OCPBUGS-17255](https://issues.redhat.com/browse/OCPBUGS-17255): Use go 1.20 and uplift x/net to v0.13.0 [#195](https://github.com/openshift/cluster-api-provider-baremetal/pull/195)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/72ddc3cdda60e902ffdfd64f3301954b095386d6...43617f25e9edcb5ee73d76d54495755bc7ec89e6)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/30b6d278b5fd793d067fd07e8117e84108aeb63f)

* [OCPBUGS-19191](https://issues.redhat.com/browse/OCPBUGS-19191): Updating ose-baremetal-operator images to be consistent with ART [#302](https://github.com/openshift/baremetal-operator/pull/302)
* Merge upstream [#301](https://github.com/openshift/baremetal-operator/pull/301)
* Stop linting when building the image [#285](https://github.com/openshift/baremetal-operator/pull/285)
* [OCPBUGS-17363](https://issues.redhat.com/browse/OCPBUGS-17363): Trigger reconcile on Secret change [#296](https://github.com/openshift/baremetal-operator/pull/296)
* [OCPBUGS-17038](https://issues.redhat.com/browse/OCPBUGS-17038): Merge upstream [#293](https://github.com/openshift/baremetal-operator/pull/293)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/7338252ff8205ef1a930286b8d5a6d56f5679a59...30b6d278b5fd793d067fd07e8117e84108aeb63f)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/c540d014aa2c4c9b0e02472afe495d9eb346d94e)

* [OCPBUGS-19098](https://issues.redhat.com/browse/OCPBUGS-19098): Updating baremetal-runtimecfg images to be consistent with ART [#274](https://github.com/openshift/baremetal-runtimecfg/pull/274)
* [OCPBUGS-18257](https://issues.redhat.com/browse/OCPBUGS-18257): Move haproxy firewall rule check earlier in loop [#270](https://github.com/openshift/baremetal-runtimecfg/pull/270)
* [OCPBUGS-15947](https://issues.redhat.com/browse/OCPBUGS-15947): Don't render config with incomplete unicast peer list [#266](https://github.com/openshift/baremetal-runtimecfg/pull/266)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/b3f3077072df5897a84c6ca2ae6b7d118dd35bf7...c540d014aa2c4c9b0e02472afe495d9eb346d94e)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/cb4d9dee30e4f1944b179ee653420c45fc8e81dd)

* [OCPBUGS-19282](https://issues.redhat.com/browse/OCPBUGS-19282): Updating ose-tools images to be consistent with ART [#1545](https://github.com/openshift/oc/pull/1545)
* [OCPBUGS-19281](https://issues.redhat.com/browse/OCPBUGS-19281): Updating openshift-enterprise-deployer images to be consistent with ART [#1544](https://github.com/openshift/oc/pull/1544)
* [OCPBUGS-19517](https://issues.redhat.com/browse/OCPBUGS-19517): remove unsupported commands from microshift docs [#1548](https://github.com/openshift/oc/pull/1548)
* [OCPBUGS-19283](https://issues.redhat.com/browse/OCPBUGS-19283): Updating ose-cli-artifacts images to be consistent with ART [#1546](https://github.com/openshift/oc/pull/1546)
* [OCPBUGS-19129](https://issues.redhat.com/browse/OCPBUGS-19129): Updating openshift-enterprise-cli images to be consistent with ART [#1542](https://github.com/openshift/oc/pull/1542)
* [OCPBUGS-17925](https://issues.redhat.com/browse/OCPBUGS-17925): pkg/cli/admin/prune/images: omit not found error for deployment configs [#1530](https://github.com/openshift/oc/pull/1530)
* [OCPBUGS-17253](https://issues.redhat.com/browse/OCPBUGS-17253): Bump go x/net library to 0.13.0 [#1529](https://github.com/openshift/oc/pull/1529)
* [OTA-559](https://issues.redhat.com/browse/OTA-559): Revert "Revert "pkg/cli/admin/release/extract: Add --included and --install-config"" [#1528](https://github.com/openshift/oc/pull/1528)
* [OCPBUGS-17711](https://issues.redhat.com/browse/OCPBUGS-17711): Revert "pkg/cli/admin/release/extract: Add --included and --install-config" [#1527](https://github.com/openshift/oc/pull/1527)
* Update openshift/api [#1525](https://github.com/openshift/oc/pull/1525)
* [OTA-559](https://issues.redhat.com/browse/OTA-559): pkg/cli/admin/release/extract: Add --included and --install-config [#1521](https://github.com/openshift/oc/pull/1521)
* Stop using deprecated github.com/docker/docker go APIs [#1514](https://github.com/openshift/oc/pull/1514)
* [OCPBUGS-16735](https://issues.redhat.com/browse/OCPBUGS-16735): Truncate existing files when writing from inspect [#1520](https://github.com/openshift/oc/pull/1520)
* [Full changelog](https://github.com/openshift/oc/compare/643b040e4f38d2d5f353ddbc839195e3935c712c...cb4d9dee30e4f1944b179ee653420c45fc8e81dd)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/2c3298b1bb3aca9d7ebcde541b49dcef039e108a)

* [OCPBUGS-17719](https://issues.redhat.com/browse/OCPBUGS-17719): Double timeout delays for managed identity creation and role assignment from 2 to 4 minutes. [#591](https://github.com/openshift/cloud-credential-operator/pull/591)
* pkg/aws/actuator: Drop comment which suggested passthrough permission verification [#590](https://github.com/openshift/cloud-credential-operator/pull/590)
* [CCO-363](https://issues.redhat.com/browse/CCO-363): Adding azure identity webhook [#559](https://github.com/openshift/cloud-credential-operator/pull/559)
* [OCPBUGS-16684](https://issues.redhat.com/browse/OCPBUGS-16684): Set cr.status.provisioned=false on syncErr path [#583](https://github.com/openshift/cloud-credential-operator/pull/583)
* [OCPBUGS-17049](https://issues.redhat.com/browse/OCPBUGS-17049): update lastSyncGeneration in STS flow sync success [#585](https://github.com/openshift/cloud-credential-operator/pull/585)
* Revert "CCO-401: Add azure-workload-identity-webhook to image references." [#588](https://github.com/openshift/cloud-credential-operator/pull/588)
* [CCO-401](https://issues.redhat.com/browse/CCO-401): Add azure-workload-identity-webhook to image references. [#586](https://github.com/openshift/cloud-credential-operator/pull/586)
* [CCO-413](https://issues.redhat.com/browse/CCO-413): Add dataPermissions to Azure credentials request. [#584](https://github.com/openshift/cloud-credential-operator/pull/584)
* [CCO-402](https://issues.redhat.com/browse/CCO-402): Create Azure AD pod identity webhook config secret manifest in create-all,create-oidc-issuer [#573](https://github.com/openshift/cloud-credential-operator/pull/573)
* [OCPCLOUD-2012](https://issues.redhat.com/browse/OCPCLOUD-2012): ccoctl: Plumb credreq.spec.cloudTokenPath override into Azure secret creation [#580](https://github.com/openshift/cloud-credential-operator/pull/580)
* [OCPBUGS-16807](https://issues.redhat.com/browse/OCPBUGS-16807): ccoctl azure exit with error when OIDC and installation resource group names are the same [#582](https://github.com/openshift/cloud-credential-operator/pull/582)
* [OCPCLOUD-2012](https://issues.redhat.com/browse/OCPCLOUD-2012): ccoctl: Add --enable-tech-preview arg to azure create-all subcommand. [#581](https://github.com/openshift/cloud-credential-operator/pull/581)
* [OCPBUGS-16614](https://issues.redhat.com/browse/OCPBUGS-16614): *: stop checking for the STS feature gate [#579](https://github.com/openshift/cloud-credential-operator/pull/579)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/de95fe7be355adaa7e0b4a7a66d3226b1936b0f8...2c3298b1bb3aca9d7ebcde541b49dcef039e108a)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/96ddbaaa1d011287ff43a3d02e269bd56afb9edf)

* [OCPBUGS-19163](https://issues.redhat.com/browse/OCPBUGS-19163): Updating ose-cloud-network-config-controller images to be consistent with ART [#122](https://github.com/openshift/cloud-network-config-controller/pull/122)
* [OCPBUGS-17151](https://issues.redhat.com/browse/OCPBUGS-17151): AWS: Skipping Unusable Network Interfaces [#120](https://github.com/openshift/cloud-network-config-controller/pull/120)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/093e68b12909732c450aabe3c740f249ad9bc445...96ddbaaa1d011287ff43a3d02e269bd56afb9edf)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/7ae04d4e2b21ed244ba349d0e609b82e010db7b2)

* [OCPBUGS-19125](https://issues.redhat.com/browse/OCPBUGS-19125): Updating ose-cluster-authentication-operator images to be consistent with ART [#634](https://github.com/openshift/cluster-authentication-operator/pull/634)
* [OCPBUGS-8093](https://issues.redhat.com/browse/OCPBUGS-8093): properly set the pod name and namespace in graceful termination lifecycle events [#628](https://github.com/openshift/cluster-authentication-operator/pull/628)
* Add openshift-cli-client in NamesFilter [#625](https://github.com/openshift/cluster-authentication-operator/pull/625)
* [OCPBUGS-16501](https://issues.redhat.com/browse/OCPBUGS-16501): bump PSa, lib-go and storage-version-migrator to get rid of goproxy dep [#624](https://github.com/openshift/cluster-authentication-operator/pull/624)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/39a1e263fbcdc329790c9161e6bf40067190b507...7ae04d4e2b21ed244ba349d0e609b82e010db7b2)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/4c298e4ba4718bdd92e43eea85245373effd18df)

* [OCPBUGS-18137](https://issues.redhat.com/browse/OCPBUGS-18137): UPSTREAM: 6066: Allow overriding the kubernetes.io/arch label set by the scale from zero methods via a new cmdline arg [#261](https://github.com/openshift/kubernetes-autoscaler/pull/261)
* [OCPBUGS-19232](https://issues.redhat.com/browse/OCPBUGS-19232): Updating vertical-pod-autoscaler images to be consistent with ART [#262](https://github.com/openshift/kubernetes-autoscaler/pull/262)
* [OCPBUGS-18852](https://issues.redhat.com/browse/OCPBUGS-18852): Updating atomic-openshift-cluster-autoscaler images to be consistent with ART [#260](https://github.com/openshift/kubernetes-autoscaler/pull/260)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/970eb9f35fb1ad49e6cdb761643728e477e7750a...4c298e4ba4718bdd92e43eea85245373effd18df)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/b85f20ceee1949f89b26d1b25df1ca610dc6c391)

* [OCPBUGS-18137](https://issues.redhat.com/browse/OCPBUGS-18137): Provide the architecture of the control plane as argument to --scale-up-from-zero-default-arch [#284](https://github.com/openshift/cluster-autoscaler-operator/pull/284)
* [OCPBUGS-18954](https://issues.redhat.com/browse/OCPBUGS-18954): Ensure status reporter caches exit if they don't sync [#285](https://github.com/openshift/cluster-autoscaler-operator/pull/285)
* [OCPBUGS-19411](https://issues.redhat.com/browse/OCPBUGS-19411): cluster-autoscaler-operator: clusterrole add clusteroperators watch [#287](https://github.com/openshift/cluster-autoscaler-operator/pull/287)
* [OCPBUGS-19169](https://issues.redhat.com/browse/OCPBUGS-19169): Updating ose-cluster-autoscaler-operator images to be consistent with ART [#286](https://github.com/openshift/cluster-autoscaler-operator/pull/286)
* [OCPBUGS-18278](https://issues.redhat.com/browse/OCPBUGS-18278): Address long acquire times during upgrade [#281](https://github.com/openshift/cluster-autoscaler-operator/pull/281)
* [OCPBUGS-18338](https://issues.redhat.com/browse/OCPBUGS-18338): Fix CI by running tests natively by default [#282](https://github.com/openshift/cluster-autoscaler-operator/pull/282)
* Reconcile when external process change the clusteroperator status [#279](https://github.com/openshift/cluster-autoscaler-operator/pull/279)
* [OCPBUGS-14356](https://issues.redhat.com/browse/OCPBUGS-14356): add nutanix labels that should be ignored [#275](https://github.com/openshift/cluster-autoscaler-operator/pull/275)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/8234904054f193e0a62e0c0231b4d1aaf3ade660...b85f20ceee1949f89b26d1b25df1ca610dc6c391)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/7db49002cd97010645238304e94134f7c7199366)

* [OCPBUGS-18788](https://issues.redhat.com/browse/OCPBUGS-18788): Remove metrics port from baremetal-operator [#361](https://github.com/openshift/cluster-baremetal-operator/pull/361)
* [OCPBUGS-19203](https://issues.redhat.com/browse/OCPBUGS-19203): Updating ose-cluster-baremetal-operator images to be consistent with ART [#362](https://github.com/openshift/cluster-baremetal-operator/pull/362)
* [OCPBUGS-17589](https://issues.redhat.com/browse/OCPBUGS-17589): Guard against nil PlatformStatus [#359](https://github.com/openshift/cluster-baremetal-operator/pull/359)
* [OCPBUGS-18059](https://issues.redhat.com/browse/OCPBUGS-18059): Inject OpenShift CA and proxy information to BMO [#358](https://github.com/openshift/cluster-baremetal-operator/pull/358)
* [OCPBUGS-17693](https://issues.redhat.com/browse/OCPBUGS-17693): adjust meta3-state service ports when proxy is on [#354](https://github.com/openshift/cluster-baremetal-operator/pull/354)
* [OCPBUGS-17693](https://issues.redhat.com/browse/OCPBUGS-17693): Use private ports for Ironic from BMO when proxy is on [#353](https://github.com/openshift/cluster-baremetal-operator/pull/353)
* reconcile status when clusteroperator changes [#351](https://github.com/openshift/cluster-baremetal-operator/pull/351)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/f15e1c53cd5740d1ef7f82c8364e5d8e97c9064a...7db49002cd97010645238304e94134f7c7199366)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/4e5f522c68cdd61b4facce39c9603c2fc70fe3d7)

* [OCPBUGS-19109](https://issues.redhat.com/browse/OCPBUGS-19109): Updating ose-cluster-api images to be consistent with ART [#180](https://github.com/openshift/cluster-api/pull/180)
* [Full changelog](https://github.com/openshift/cluster-api/compare/4efea4967a1de8d60393f1b5b5c89e1145992c8a...4e5f522c68cdd61b4facce39c9603c2fc70fe3d7)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/34c6254e45748f8b5840752fb35622447c19c8d6)

* [MULTIARCH-3761](https://issues.redhat.com/browse/MULTIARCH-3761): Power VS CAPI Remove deprecated flag [#128](https://github.com/openshift/cluster-capi-operator/pull/128)
* [OCPBUGS-18504](https://issues.redhat.com/browse/OCPBUGS-18504): e2e: set ControlPlaneEndpoint in AWSCluster [#126](https://github.com/openshift/cluster-capi-operator/pull/126)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/504be5bee927f7c1d0265b82054049283699b988...34c6254e45748f8b5840752fb35622447c19c8d6)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/30371bdc5188a693071475c43ff959de18c7cc54)

* [OCPBUGS-18841](https://issues.redhat.com/browse/OCPBUGS-18841): Ensure subnets read permission for granular roles [#281](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/281)
* [OCPBUGS-14718](https://issues.redhat.com/browse/OCPBUGS-14718): Add message for CABundleControllerDegradedCondition error [#275](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/275)
* [OCPCLOUD-2013](https://issues.redhat.com/browse/OCPCLOUD-2013): Move Azure Credentials Request to custom role [#274](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/274)
* [OCPCLOUD-2149](https://issues.redhat.com/browse/OCPCLOUD-2149): Azure: CCM and node manager to use provided credentials instead of MSI. [#268](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/268)
* [OCPBUGS-15154](https://issues.redhat.com/browse/OCPBUGS-15154): Prune provider permissions post move to use-service-account-credentials [#259](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/259)
* OpenStack: Enable manage-security-groups by default [#264](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/264)
* OpenStack: Extend owners [#266](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/266)
* OpenStack: Set max-shared-lb to disable the feature [#263](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/263)
* [OCPBUGS-16690](https://issues.redhat.com/browse/OCPBUGS-16690): Allow all NoSchedule taints for Azure CNM DaemonSet [#267](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/267)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/4714ad4d26227e0bd91e0e95879e44a25d36d83f...30371bdc5188a693071475c43ff959de18c7cc54)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/a2697ad494677fcbe2e453fb7af9c1d59f156583)

* [OCPBUGS-19106](https://issues.redhat.com/browse/OCPBUGS-19106): Updating ose-cluster-config-operator images to be consistent with ART [#353](https://github.com/openshift/cluster-config-operator/pull/353)
* [CCO-412](https://issues.redhat.com/browse/CCO-412): Bump API to promote azureWorkloadIdentity to defaultFeatures [#351](https://github.com/openshift/cluster-config-operator/pull/351)
* Revert "Bump to enable ValidatingAdmissionPolicy in tech preview." [#346](https://github.com/openshift/cluster-config-operator/pull/346)
* Bump to enable ValidatingAdmissionPolicy in tech preview. [#343](https://github.com/openshift/cluster-config-operator/pull/343)
* Bump openshift/api to add ValidatingAdmissionPolicy feature gate. [#340](https://github.com/openshift/cluster-config-operator/pull/340)
* [OCPVE-626](https://issues.redhat.com/browse/OCPVE-626): bump(openshift/api@master) [#341](https://github.com/openshift/cluster-config-operator/pull/341)
* [CFE-689](https://issues.redhat.com/browse/CFE-689): Update openshift/api package to latest version [#335](https://github.com/openshift/cluster-config-operator/pull/335)
* [OCPBUGS-16614](https://issues.redhat.com/browse/OCPBUGS-16614): go.mod: bump openshift/api [#338](https://github.com/openshift/cluster-config-operator/pull/338)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/3d2af2c878504553a8c1bcdcd975c02950673be6...a2697ad494677fcbe2e453fb7af9c1d59f156583)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/a7e0190f60a8777430752e68604e18232b38c76e)

* [OCPCLOUD-2169](https://issues.redhat.com/browse/OCPCLOUD-2169): Check CPMS events are not present when we expect error [#243](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/243)
* [OCPCLOUD-2169](https://issues.redhat.com/browse/OCPCLOUD-2169): Add events for machine creation/deletion [#242](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/242)
* [OCPBUGS-19226](https://issues.redhat.com/browse/OCPBUGS-19226): Updating ose-cluster-control-plane-machine-set-operator images to be consistent with ART [#241](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/241)
* [OCPBUGS-18056](https://issues.redhat.com/browse/OCPBUGS-18056): Address long acquire times during upgrade [#237](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/237)
* [OCPBUGS-18013](https://issues.redhat.com/browse/OCPBUGS-18013): Enhance wehbooks to dry run machine creation to validate provider spec [#230](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/230)
* Revert "OCPCLOUD-2130: Add subnet to Azure FD, fix for optional fields in FD" [#233](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/233)
* [OCPCLOUD-2130](https://issues.redhat.com/browse/OCPCLOUD-2130): Add subnet to Azure FD, fix for optional fields in FD [#229](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/229)
* test/e2e: override `RootVolume.VolumeType` to "" [#232](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/232)
* openstack: volumeType is now required [#231](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/231)
* manifests: Shift from run level 31 to 30 [#227](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/227)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/ce8e5da860c0a30ab4339a5ace909cda9b3d1753...a7e0190f60a8777430752e68604e18232b38c76e)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/809d4caef5ba829e1951985128f5bef29c2be560)

* [STOR-1443](https://issues.redhat.com/browse/STOR-1443): Restart webhook Pods if `csi-snapshot-webhook-secret` changed [#157](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/157)
* [OCPBUGS-19162](https://issues.redhat.com/browse/OCPBUGS-19162): Updating ose-cluster-csi-snapshot-controller-operator images to be consistent with ART [#160](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/160)
* [OCPBUGS-3680](https://issues.redhat.com/browse/OCPBUGS-3680): Move readonlyRootFilesystem to the right place [#159](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/159)
* [HOSTEDCP-1063](https://issues.redhat.com/browse/HOSTEDCP-1063): allow webhooks in hosted clusters to reach csi-snapshot-webhook service [#155](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/155)
* [OCPBUGS-3680](https://issues.redhat.com/browse/OCPBUGS-3680): Set readOnlyRootFilesystem to false [#154](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/154)
* [OCPBUGS-16783](https://issues.redhat.com/browse/OCPBUGS-16783): Chore: Update OWNERS [#152](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/152)
* [OCPBUGS-16508](https://issues.redhat.com/browse/OCPBUGS-16508): Bump library-go to remove dependency on goproxy [#153](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/153)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/eaaf7260464bd6cb6126dfd7259cb6217eb25340...809d4caef5ba829e1951985128f5bef29c2be560)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/c03919da0952618d02225d3e58cb391806c9e2f0)

* [OCPBUGS-19510](https://issues.redhat.com/browse/OCPBUGS-19510): test/e2e: Set controller-runtime logger [#381](https://github.com/openshift/cluster-dns-operator/pull/381)
* [OCPBUGS-19126](https://issues.redhat.com/browse/OCPBUGS-19126): Updating ose-cluster-dns-operator images to be consistent with ART [#380](https://github.com/openshift/cluster-dns-operator/pull/380)
* [OCPBUGS-18034](https://issues.redhat.com/browse/OCPBUGS-18034): Only bump lastTransitionTime on 'status' changes [#375](https://github.com/openshift/cluster-dns-operator/pull/375)
* [OCPBUGS-15605](https://issues.redhat.com/browse/OCPBUGS-15605): Update bufsize to 1232 bytes [#370](https://github.com/openshift/cluster-dns-operator/pull/370)
* [OCPBUGS-13209](https://issues.redhat.com/browse/OCPBUGS-13209): Revert "Set DNS DaemonSet's maxSurge value to 10%" [#379](https://github.com/openshift/cluster-dns-operator/pull/379)
* [NE-1268](https://issues.redhat.com/browse/NE-1268): Replace bindata using embed [#361](https://github.com/openshift/cluster-dns-operator/pull/361)
* [OCPBUGS-12863](https://issues.redhat.com/browse/OCPBUGS-12863): Replace Bugzilla link with Red Hat Issue Tracker [#374](https://github.com/openshift/cluster-dns-operator/pull/374)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/47be7b57fbc7eecdd91bc3960f6bc4d7d0304133...c03919da0952618d02225d3e58cb391806c9e2f0)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/2e1bb31d9d0a9725d8ef0604580a3e70ceeff0a5)

* [OCPBUGS-19137](https://issues.redhat.com/browse/OCPBUGS-19137): Updating cluster-etcd-operator images to be consistent with ART [#1115](https://github.com/openshift/cluster-etcd-operator/pull/1115)
* [OCPBUGS-16794](https://issues.redhat.com/browse/OCPBUGS-16794): installerpod: change pod manifest mode to 0600 [#1123](https://github.com/openshift/cluster-etcd-operator/pull/1123)
* [OCPBUGS-19052](https://issues.redhat.com/browse/OCPBUGS-19052): Avoid caching etcdctl on cluster-backup.sh [#1113](https://github.com/openshift/cluster-etcd-operator/pull/1113)
* indicate ownership of etcd certificates [#1110](https://github.com/openshift/cluster-etcd-operator/pull/1110)
* [OCPBUGS-18990](https://issues.redhat.com/browse/OCPBUGS-18990): restore the correct static pod list [#1111](https://github.com/openshift/cluster-etcd-operator/pull/1111)
* [OCPBUGS-18357](https://issues.redhat.com/browse/OCPBUGS-18357): prepend authfile to podman create [#1105](https://github.com/openshift/cluster-etcd-operator/pull/1105)
* [ETCD-458](https://issues.redhat.com/browse/ETCD-458): Add etcd pod tuning configuration from api [#1086](https://github.com/openshift/cluster-etcd-operator/pull/1086)
* add e2e test for cronjob reconciliation failures [#1098](https://github.com/openshift/cluster-etcd-operator/pull/1098)
* add pvc validation and e2e tests [#1096](https://github.com/openshift/cluster-etcd-operator/pull/1096)
* add backup skip e2e test [#1095](https://github.com/openshift/cluster-etcd-operator/pull/1095)
* e2e test for size retention [#1093](https://github.com/openshift/cluster-etcd-operator/pull/1093)
* [OCPBUGS-16889](https://issues.redhat.com/browse/OCPBUGS-16889): machine api check: rely on status more than baseline [#1094](https://github.com/openshift/cluster-etcd-operator/pull/1094)
* add processed label to skipped backups [#1092](https://github.com/openshift/cluster-etcd-operator/pull/1092)
* update overview slides [#1091](https://github.com/openshift/cluster-etcd-operator/pull/1091)
* [ETCD-460](https://issues.redhat.com/browse/ETCD-460): add basic backup e2e tests [#1089](https://github.com/openshift/cluster-etcd-operator/pull/1089)
* add backup pv pvc yaml [#1090](https://github.com/openshift/cluster-etcd-operator/pull/1090)
* [ETCD-448](https://issues.redhat.com/browse/ETCD-448): add init container [#1088](https://github.com/openshift/cluster-etcd-operator/pull/1088)
* Add cmd for creating EtcdBackup CR and use in CronJob [#1084](https://github.com/openshift/cluster-etcd-operator/pull/1084)
* [OCPBUGS-16889](https://issues.redhat.com/browse/OCPBUGS-16889): handle optional machineAPI [#1083](https://github.com/openshift/cluster-etcd-operator/pull/1083)
* [ETCD-448](https://issues.redhat.com/browse/ETCD-448): add backup pruning cmd [#1081](https://github.com/openshift/cluster-etcd-operator/pull/1081)
* add informers to new backup controllers (gate by restart) [#1082](https://github.com/openshift/cluster-etcd-operator/pull/1082)
* dump all goroutines, not the current stack [#1079](https://github.com/openshift/cluster-etcd-operator/pull/1079)
* [OCPBUGS-16445](https://issues.redhat.com/browse/OCPBUGS-16445): bump library-go [#1077](https://github.com/openshift/cluster-etcd-operator/pull/1077)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/e3d686d9e7125514a9045ecdb92263a50ed961ba...2e1bb31d9d0a9725d8ef0604580a3e70ceeff0a5)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/c1b9062760bd6c67c70225395c961cc26cbe46ce)

* [OCPBUGS-19262](https://issues.redhat.com/browse/OCPBUGS-19262): Updating ose-cluster-image-registry-operator images to be consistent with ART [#918](https://github.com/openshift/cluster-image-registry-operator/pull/918)
* [OCPBUGS-18469](https://issues.redhat.com/browse/OCPBUGS-18469): increase storage account key cache expiration [#912](https://github.com/openshift/cluster-image-registry-operator/pull/912)
* [OCPBUGS-17060](https://issues.redhat.com/browse/OCPBUGS-17060): use Recreate on operator deployment [#908](https://github.com/openshift/cluster-image-registry-operator/pull/908)
* [OCPBUGS-18103](https://issues.redhat.com/browse/OCPBUGS-18103): check if response is nil before using it [#909](https://github.com/openshift/cluster-image-registry-operator/pull/909)
* [OCPVE-632](https://issues.redhat.com/browse/OCPVE-632): add capability annotations to manifests [#856](https://github.com/openshift/cluster-image-registry-operator/pull/856)
* [OCPBUGS-17882](https://issues.redhat.com/browse/OCPBUGS-17882): Add rbac permission IDMS, ITMS [#891](https://github.com/openshift/cluster-image-registry-operator/pull/891)
* [TRT-1193](https://issues.redhat.com/browse/TRT-1193): Revert "IR-373: remove node-ca daemon" [#899](https://github.com/openshift/cluster-image-registry-operator/pull/899)
* [CFE-846](https://issues.redhat.com/browse/CFE-846): Add user defined tags to the GCP buckets created [#873](https://github.com/openshift/cluster-image-registry-operator/pull/873)
* [IR-373](https://issues.redhat.com/browse/IR-373): remove node-ca daemon [#867](https://github.com/openshift/cluster-image-registry-operator/pull/867)
* build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4 [#877](https://github.com/openshift/cluster-image-registry-operator/pull/877)
* build(deps): bump the k8s-dependencies group with 1 update [#895](https://github.com/openshift/cluster-image-registry-operator/pull/895)
* [IR-363](https://issues.redhat.com/browse/IR-363): Update Azure Credentials Request manifest of the Cluster Image Registry Operator to use new API field for requesting permissions [#890](https://github.com/openshift/cluster-image-registry-operator/pull/890)
* build(deps): bump github.com/prometheus/common from 0.37.0 to 0.44.0 [#878](https://github.com/openshift/cluster-image-registry-operator/pull/878)
* [CFE-682](https://issues.redhat.com/browse/CFE-682): Add user defined labels to the GCP buckets created [#872](https://github.com/openshift/cluster-image-registry-operator/pull/872)
* [CFE-682](https://issues.redhat.com/browse/CFE-682): Update openshift/api package to latest version [#887](https://github.com/openshift/cluster-image-registry-operator/pull/887)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/09e645719ca3eece251dd84820df88256a188003...c1b9062760bd6c67c70225395c961cc26cbe46ce)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/a10d93e71e59779eed2f5e904a5a15ef4680fb41)

* [OCPBUGS-3541](https://issues.redhat.com/browse/OCPBUGS-3541): Don't create route metrics for ingress controllers that are not admitted [#869](https://github.com/openshift/cluster-ingress-operator/pull/869)
* [OCPBUGS-18248](https://issues.redhat.com/browse/OCPBUGS-18248): Prevent GatewayClass from getting recreated [#975](https://github.com/openshift/cluster-ingress-operator/pull/975)
* [OCPBUGS-19268](https://issues.redhat.com/browse/OCPBUGS-19268): Updating ose-cluster-ingress-operator images to be consistent with ART [#977](https://github.com/openshift/cluster-ingress-operator/pull/977)
* [OCPBUGS-15900](https://issues.redhat.com/browse/OCPBUGS-15900): TestMTLSWithCRLs: only try to parse HTTP status code from curl output when stdout is long enough. [#973](https://github.com/openshift/cluster-ingress-operator/pull/973)
* [OCPBUGS-3356](https://issues.redhat.com/browse/OCPBUGS-3356): E2E test for cookie length truncation [#871](https://github.com/openshift/cluster-ingress-operator/pull/871)
* [OCPBUGS-15978](https://issues.redhat.com/browse/OCPBUGS-15978): Check public DNS zone when reporting status [#967](https://github.com/openshift/cluster-ingress-operator/pull/967)
* [OCPBUGS-17359](https://issues.redhat.com/browse/OCPBUGS-17359): test/e2e: Don't use openshift/origin-node [#970](https://github.com/openshift/cluster-ingress-operator/pull/970)
* [NE-1140](https://issues.redhat.com/browse/NE-1140), [NE-1145](https://issues.redhat.com/browse/NE-1145): Set/delete HTTP request/response headers via IngressController API [#872](https://github.com/openshift/cluster-ingress-operator/pull/872)
* [OCPBUGS-16089](https://issues.redhat.com/browse/OCPBUGS-16089): Set spec.subdomain on the canary route [#965](https://github.com/openshift/cluster-ingress-operator/pull/965)
* [OCPBUGS-14995](https://issues.redhat.com/browse/OCPBUGS-14995): desiredRouterDeployment: Set HostPort if needed [#947](https://github.com/openshift/cluster-ingress-operator/pull/947)
* [OCPBUGS-10875](https://issues.redhat.com/browse/OCPBUGS-10875): gateway-service-dns: Set DNS policy appropriately [#934](https://github.com/openshift/cluster-ingress-operator/pull/934)
* [NE-1244](https://issues.redhat.com/browse/NE-1244): Use permissions instead of the "Contributor" role in Azure CredentialsRequest [#929](https://github.com/openshift/cluster-ingress-operator/pull/929)
* [OCPBUGS-12790](https://issues.redhat.com/browse/OCPBUGS-12790): README: Fix Bugzilla link [#968](https://github.com/openshift/cluster-ingress-operator/pull/968)
* [RFE-3007](https://issues.redhat.com/browse/RFE-3007): Expose option-contstats as an unsupported option [#887](https://github.com/openshift/cluster-ingress-operator/pull/887)
* [NE-1189](https://issues.redhat.com/browse/NE-1189): Refactor Test_desiredLoadBalancerService [#886](https://github.com/openshift/cluster-ingress-operator/pull/886)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/83c9c4179f35ed2c79537f81f7e38cf0221638cb...a10d93e71e59779eed2f5e904a5a15ef4680fb41)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/a66fe80f9ce087436b7bdd2e05af512892864664)

* [OCPBUGS-16794](https://issues.redhat.com/browse/OCPBUGS-16794): installerpod: change pod manifest mode to 0600 [#1557](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1557)
* [OCPBUGS-19024](https://issues.redhat.com/browse/OCPBUGS-19024): remove featuregate upgradeable controller that moved to cluster-config-operator [#1547](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1547)
* [OCPBUGS-18247](https://issues.redhat.com/browse/OCPBUGS-18247): manifests: don't include recording rules when Console capability is not enabled [#1542](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1542)
* [OCPBUGS-15504](https://issues.redhat.com/browse/OCPBUGS-15504): manifest: remove kube-apiserver PrometheusRule [#1543](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1543)
* Bump openshift/* libs [#1549](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1549)
* Update to Kubernetes 1.28.2 [#1548](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1548)
* [STOR-1425](https://issues.redhat.com/browse/STOR-1425): Update to Kubernetes 1.28.1 [#1534](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1534)
* [OCPBUGS-17436](https://issues.redhat.com/browse/OCPBUGS-17436): Unrevert 1536 and 1538. [#1541](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1541)
* Reverts DynamicResourceAllocation enablement on techpreview [#1540](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1540)
* [OCPBUGS-17436](https://issues.redhat.com/browse/OCPBUGS-17436): Enable DynamicResourceAllocation API in kube-apiserver [#1538](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1538)
* Set runtime-config in lockstep with feature-gates, if needed. [#1536](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1536)
* bump(api) [#1535](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1535)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/71f29f6df5edbc47aeb666de399a960685241e29...a66fe80f9ce087436b7bdd2e05af512892864664)


### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/df8c67eca258f39a5fe3cbf301e0933912416aa0)

* [OCPBUGS-19135](https://issues.redhat.com/browse/OCPBUGS-19135): Updating ose-cluster-kube-cluster-api-operator images to be consistent with ART [#24](https://github.com/openshift/cluster-api-operator/pull/24)
* [Full changelog](https://github.com/openshift/cluster-api-operator/compare/466582d5b0ecd28b1d62a3300fbe3770dca6224a...df8c67eca258f39a5fe3cbf301e0933912416aa0)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/fb66249b5b2e1f00308f3b72ce38b3ba1168c159)

* [OCPBUGS-16794](https://issues.redhat.com/browse/OCPBUGS-16794): installerpod: change pod manifest mode to 0600 [#750](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/750)
* [OCPBUGS-19263](https://issues.redhat.com/browse/OCPBUGS-19263): Updating ose-cluster-kube-controller-manager-operator images to be consistent with ART [#747](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/747)
* Bump openshift/* libs [#746](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/746)
* Update to Kubernetes 1.28.2 [#744](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/744)
* [STOR-1425](https://issues.redhat.com/browse/STOR-1425): Update to Kubernetes 1.28.1 [#742](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/742)
* add roles for the new privileged namespaces PSa syncer controller [#743](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/743)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/5f49f59c88c963d97dd90643e7c9fb7ef1820d0c...fb66249b5b2e1f00308f3b72ce38b3ba1168c159)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/e0690f4ec17ae9dcd5de65fb49c0a810e7d46b0b)

* [OCPBUGS-16794](https://issues.redhat.com/browse/OCPBUGS-16794): installerpod: change pod manifest mode to 0600 [#496](https://github.com/openshift/cluster-kube-scheduler-operator/pull/496)
* [OCPBUGS-19175](https://issues.redhat.com/browse/OCPBUGS-19175): Updating ose-cluster-kube-scheduler-operator images to be consistent with ART [#493](https://github.com/openshift/cluster-kube-scheduler-operator/pull/493)
* Bump openshift/* libs [#492](https://github.com/openshift/cluster-kube-scheduler-operator/pull/492)
* Update to Kubernetes 1.28.2 [#491](https://github.com/openshift/cluster-kube-scheduler-operator/pull/491)
* [STOR-1425](https://issues.redhat.com/browse/STOR-1425): Update to Kubernetes 1.28.1 [#490](https://github.com/openshift/cluster-kube-scheduler-operator/pull/490)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/db92b6d9fcf410aa24efc4a70c4114925bb7b797...e0690f4ec17ae9dcd5de65fb49c0a810e7d46b0b)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/332cb1cd0f9a00c03e3f9d400ae8483abd03036c)

* Revert "specify master node selector on migrator pod" [#93](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/93)
* [OCPBUGS-17170](https://issues.redhat.com/browse/OCPBUGS-17170): specify master node selector on migrator pod [#92](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/92)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/f3e404cfbce5a16461c60793f2914e600aa1a18b...332cb1cd0f9a00c03e3f9d400ae8483abd03036c)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/63a396cb4bef949923507ec28b832741d93c950e)

* [OCPBUGS-17090](https://issues.redhat.com/browse/OCPBUGS-17090): Set logger for controller runtime [#200](https://github.com/openshift/cluster-machine-approver/pull/200)
* [OCPBUGS-18338](https://issues.redhat.com/browse/OCPBUGS-18338): Fix CI by running tests natively by default [#199](https://github.com/openshift/cluster-machine-approver/pull/199)
* [OCPBUGS-16156](https://issues.redhat.com/browse/OCPBUGS-16156): check if machine api present [#198](https://github.com/openshift/cluster-machine-approver/pull/198)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/702f688fb79b10e38f37ccc9cd61a1aac82de770...63a396cb4bef949923507ec28b832741d93c950e)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/1f4c82b34cb9d82e11cfe4869d914a113f4cc919)

* Set Thanos version in the Thanos Ruler spec [#2094](https://github.com/openshift/cluster-monitoring-operator/pull/2094)
* [OCPBUGS-19237](https://issues.redhat.com/browse/OCPBUGS-19237): Updating cluster-monitoring-operator images to be consistent with ART [#2084](https://github.com/openshift/cluster-monitoring-operator/pull/2084)
* Synchronize versions of the downstream components [#2093](https://github.com/openshift/cluster-monitoring-operator/pull/2093)
* Synchronize versions of the downstream components [#2089](https://github.com/openshift/cluster-monitoring-operator/pull/2089)
* [MON-3383](https://issues.redhat.com/browse/MON-3383): Remove weak cryptograhic primitive usage [#2086](https://github.com/openshift/cluster-monitoring-operator/pull/2086)
* [OCPBUGS-18390](https://issues.redhat.com/browse/OCPBUGS-18390): jsonnet/rules: exclude -1 from etcd objects count [#2081](https://github.com/openshift/cluster-monitoring-operator/pull/2081)
* [OCPBUGS-19059](https://issues.redhat.com/browse/OCPBUGS-19059): Enable ipv6 on monitoring-plugin nginx [#2090](https://github.com/openshift/cluster-monitoring-operator/pull/2090)
* [MON-3376](https://issues.redhat.com/browse/MON-3376): Remove deprecated --logtostderr argument [#2077](https://github.com/openshift/cluster-monitoring-operator/pull/2077)
* [OCPBUGS-19356](https://issues.redhat.com/browse/OCPBUGS-19356): Topology spread constraints admission webhook [#2073](https://github.com/openshift/cluster-monitoring-operator/pull/2073)
* [OCPBUGS-17682](https://issues.redhat.com/browse/OCPBUGS-17682): add topologySpreadConstraints to UWM prometheus operator [#2072](https://github.com/openshift/cluster-monitoring-operator/pull/2072)
* Synchronize versions of the downstream components [#2082](https://github.com/openshift/cluster-monitoring-operator/pull/2082)
* [MON-2642](https://issues.redhat.com/browse/MON-2642): Improve e2e tests for alertrelabelconfigs CRD [#2080](https://github.com/openshift/cluster-monitoring-operator/pull/2080)
* [MON-3304](https://issues.redhat.com/browse/MON-3304): Add option to specify resource limits for all components [#2067](https://github.com/openshift/cluster-monitoring-operator/pull/2067)
* [OCPBUGS-17690](https://issues.redhat.com/browse/OCPBUGS-17690): remove deprecated argument [#2075](https://github.com/openshift/cluster-monitoring-operator/pull/2075)
* [OCPBUGS-17691](https://issues.redhat.com/browse/OCPBUGS-17691): replace outdated repository link [#2074](https://github.com/openshift/cluster-monitoring-operator/pull/2074)
* [MON-2641](https://issues.redhat.com/browse/MON-2641): Add e2e tests for AlertingRule controller [#2054](https://github.com/openshift/cluster-monitoring-operator/pull/2054)
* Add telemeter client SA to rbac proxy [#2043](https://github.com/openshift/cluster-monitoring-operator/pull/2043)
* [OCPBUGS-1062](https://issues.redhat.com/browse/OCPBUGS-1062): update webhook configuration only if required [#2065](https://github.com/openshift/cluster-monitoring-operator/pull/2065)
* [MON-988](https://issues.redhat.com/browse/MON-988): remove alert "MultipleContainersOOMKilled" [#2071](https://github.com/openshift/cluster-monitoring-operator/pull/2071)
* Remove deprecated visual_web_terminal_sessions metric [#2059](https://github.com/openshift/cluster-monitoring-operator/pull/2059)
* [OCPBUGS-17487](https://issues.redhat.com/browse/OCPBUGS-17487): fix typo for ThanosRulerConfig.Resources [#2070](https://github.com/openshift/cluster-monitoring-operator/pull/2070)
* Update jsonnet dependencies [#2063](https://github.com/openshift/cluster-monitoring-operator/pull/2063)
* [OCPBUGS-17346](https://issues.redhat.com/browse/OCPBUGS-17346): Avoid recreating some resources, created by prometheus-operator, during 4.13->4.14 upgrade [#2066](https://github.com/openshift/cluster-monitoring-operator/pull/2066)
* [MON-3291](https://issues.redhat.com/browse/MON-3291): Adjust node-exporter's MaxProcs documentation now that we s… [#2055](https://github.com/openshift/cluster-monitoring-operator/pull/2055)
* Synchronize versions of the downstream components [#2061](https://github.com/openshift/cluster-monitoring-operator/pull/2061)
* [MON-3093](https://issues.redhat.com/browse/MON-3093): fix single node replica issue [#2060](https://github.com/openshift/cluster-monitoring-operator/pull/2060)
* [OCPBUGS-17191](https://issues.redhat.com/browse/OCPBUGS-17191): add namespace label to alerting rules [#2058](https://github.com/openshift/cluster-monitoring-operator/pull/2058)
* Synchronize versions of the downstream components [#2056](https://github.com/openshift/cluster-monitoring-operator/pull/2056)
* [MON-2645](https://issues.redhat.com/browse/MON-2645): remove unnecessary RBAC permissions [#2051](https://github.com/openshift/cluster-monitoring-operator/pull/2051)
* Synchronize versions of the downstream components [#2052](https://github.com/openshift/cluster-monitoring-operator/pull/2052)
* [OCPBUGS-10699](https://issues.redhat.com/browse/OCPBUGS-10699): remove Kube*QuotaOvercommit alerts [#2049](https://github.com/openshift/cluster-monitoring-operator/pull/2049)
* [MON-2645](https://issues.redhat.com/browse/MON-2645): remove unused rebalancer code [#2048](https://github.com/openshift/cluster-monitoring-operator/pull/2048)
* Synchronize versions of the downstream components [#2050](https://github.com/openshift/cluster-monitoring-operator/pull/2050)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/91d735bd8662965037aae60c846c53baa79752ac...1f4c82b34cb9d82e11cfe4869d914a113f4cc919)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/9150a7b462705d7e87f7b0643ac37e877442ac53)

* [OCPBUGS-19418](https://issues.redhat.com/browse/OCPBUGS-19418): Relax conditions to get IC upgrade started [#2018](https://github.com/openshift/cluster-network-operator/pull/2018)
* [OCPBUGS-18396](https://issues.redhat.com/browse/OCPBUGS-18396): Fix config status MTU migration not being updated [#2021](https://github.com/openshift/cluster-network-operator/pull/2021)
* [OCPBUGS-19705](https://issues.redhat.com/browse/OCPBUGS-19705): Use port 9108 for ovnkube-control-plane metrics [#2031](https://github.com/openshift/cluster-network-operator/pull/2031)
* [OCPBUGS-19715](https://issues.redhat.com/browse/OCPBUGS-19715): Do not enable node admission webhook if the CNI is not OVN-Kubernetes [#2030](https://github.com/openshift/cluster-network-operator/pull/2030)
* [OCPBUGS-17391](https://issues.redhat.com/browse/OCPBUGS-17391): remove prestop hooks for northd, sbdbd and nbdb [#1978](https://github.com/openshift/cluster-network-operator/pull/1978)
* [OCPBUGS-19625](https://issues.redhat.com/browse/OCPBUGS-19625): Multus per-node certificate request [#2009](https://github.com/openshift/cluster-network-operator/pull/2009)
* [OCPBUGS-19377](https://issues.redhat.com/browse/OCPBUGS-19377): Kuryr: Fix deriving MTU from previous config [#2007](https://github.com/openshift/cluster-network-operator/pull/2007)
* [OCPBUGS-19648](https://issues.redhat.com/browse/OCPBUGS-19648): Network identity: node-specific certificate in ovnkube-node, admission webhook [#1983](https://github.com/openshift/cluster-network-operator/pull/1983)
* [OCPBUGS-19550](https://issues.redhat.com/browse/OCPBUGS-19550): multus: set MULTUS_NODE_NAME to filter pods to local node [#2020](https://github.com/openshift/cluster-network-operator/pull/2020)
* [OCPBUGS-19018](https://issues.redhat.com/browse/OCPBUGS-19018): use $CPE_NAME to find the OS major version [#2003](https://github.com/openshift/cluster-network-operator/pull/2003)
* [OCPBUGS-19494](https://issues.redhat.com/browse/OCPBUGS-19494): ipsec: remove preStop from host [#2015](https://github.com/openshift/cluster-network-operator/pull/2015)
* [OCPBUGS-18114](https://issues.redhat.com/browse/OCPBUGS-18114): Update node selector in various YAMLs [#1845](https://github.com/openshift/cluster-network-operator/pull/1845)
* Limit OVN-Kubernetes permissions [#1982](https://github.com/openshift/cluster-network-operator/pull/1982)
* [OCPBUGS-18892](https://issues.redhat.com/browse/OCPBUGS-18892): make ipsec.service required [#1999](https://github.com/openshift/cluster-network-operator/pull/1999)
* [OCPBUGS-19236](https://issues.redhat.com/browse/OCPBUGS-19236): Updating cluster-network-operator images to be consistent with ART [#2006](https://github.com/openshift/cluster-network-operator/pull/2006)
* separate libovsdblogs from main ovnkube-master logs [#1938](https://github.com/openshift/cluster-network-operator/pull/1938)
* [OCPBUGS-15201](https://issues.redhat.com/browse/OCPBUGS-15201): Disable weak SSH cipher suites [#1981](https://github.com/openshift/cluster-network-operator/pull/1981)
* [OCPBUGS-18676](https://issues.redhat.com/browse/OCPBUGS-18676): ovnkube: set northd backoff-interval and use a single thread to save CPU [#1990](https://github.com/openshift/cluster-network-operator/pull/1990)
* [OCPBUGS-17380](https://issues.redhat.com/browse/OCPBUGS-17380): ipsec: fix oopsy from 2e3fc8e7a0 [#1996](https://github.com/openshift/cluster-network-operator/pull/1996)
* [OCPBUGS-18517](https://issues.redhat.com/browse/OCPBUGS-18517): Kuryr: Set MTU on Bootstrap, not Render phase [#1988](https://github.com/openshift/cluster-network-operator/pull/1988)
* [OCPBUGS-18135](https://issues.redhat.com/browse/OCPBUGS-18135): IBMCloud specific: patch out management workload for dataplane component thats needed for bootstrapping [#1955](https://github.com/openshift/cluster-network-operator/pull/1955)
* move IPsec to host [#1849](https://github.com/openshift/cluster-network-operator/pull/1849)
* [OCPBUGS-17916](https://issues.redhat.com/browse/OCPBUGS-17916): Fix IC configmap lookup in pod_status.go [#1954](https://github.com/openshift/cluster-network-operator/pull/1954)
* [OCPBUGS-17677](https://issues.redhat.com/browse/OCPBUGS-17677): [Azure]CNCC failed to assign egressIP to NIC for Azure Workload Identity Cluster [#1980](https://github.com/openshift/cluster-network-operator/pull/1980)
* [OCPBUGS-18363](https://issues.redhat.com/browse/OCPBUGS-18363): Add '/etc/cni/multus/net.d' into volumemount in multus pod [#1979](https://github.com/openshift/cluster-network-operator/pull/1979)
* [OCPBUGS-18175](https://issues.redhat.com/browse/OCPBUGS-18175): Fix bond-cni's default directory in multus manifest [#1953](https://github.com/openshift/cluster-network-operator/pull/1953)
* [OCPBUGS-17782](https://issues.redhat.com/browse/OCPBUGS-17782), [SDN-3664](https://issues.redhat.com/browse/SDN-3664): Join ovnkube-controller and ovnkube-node container for multizone setup [#1971](https://github.com/openshift/cluster-network-operator/pull/1971)
* [OCPBUGS-16051](https://issues.redhat.com/browse/OCPBUGS-16051), [OCPBUGS-3176](https://issues.redhat.com/browse/OCPBUGS-3176): Enables IP Forwarding config in CNO [#1952](https://github.com/openshift/cluster-network-operator/pull/1952)
* [OCPBUGS-17257](https://issues.redhat.com/browse/OCPBUGS-17257): CVE-2023-3978: golang.org/x/net/html: Cross site scripting [#1935](https://github.com/openshift/cluster-network-operator/pull/1935)
* [OCPBUGS-17677](https://issues.redhat.com/browse/OCPBUGS-17677): [Azure] Add granular permission for assigning egressIP to NIC to Azure CredentialsRequest for workload identity. [#1949](https://github.com/openshift/cluster-network-operator/pull/1949)
* [OCPBUGS-17964](https://issues.redhat.com/browse/OCPBUGS-17964): ovn-k, managed: Align join subnet configuration [#1962](https://github.com/openshift/cluster-network-operator/pull/1962)
* [SDN-4024](https://issues.redhat.com/browse/SDN-4024): Add ANP Feature Gate [#1859](https://github.com/openshift/cluster-network-operator/pull/1859)
* [SDN-4057](https://issues.redhat.com/browse/SDN-4057): hypershift: Allow ovnkube-master and ovnkube-node to have different images [#1942](https://github.com/openshift/cluster-network-operator/pull/1942)
* Remove certificatesigningrequests/update permission from ovnkubenode [#1934](https://github.com/openshift/cluster-network-operator/pull/1934)
* Add rolling update for managed ovnkube-control-plane [#1944](https://github.com/openshift/cluster-network-operator/pull/1944)
* IC & openshift + hypershift [#1874](https://github.com/openshift/cluster-network-operator/pull/1874)
* [OCPBUGS-16019](https://issues.redhat.com/browse/OCPBUGS-16019): prevent creation of multiple cni-sysctl-allowlist-ds pods [#1904](https://github.com/openshift/cluster-network-operator/pull/1904)
* [OCPBUGS-10765](https://issues.redhat.com/browse/OCPBUGS-10765): make MAXLOGFILES a real variable and work for self-hosted [#1931](https://github.com/openshift/cluster-network-operator/pull/1931)
* Multus thick plugin support [#1915](https://github.com/openshift/cluster-network-operator/pull/1915)
* OVN-Kubernetes ipsec: create the CSR with a random name [#1928](https://github.com/openshift/cluster-network-operator/pull/1928)
* [CCO-294](https://issues.redhat.com/browse/CCO-294): Switch azure credentials request to use explicit permissions [#1922](https://github.com/openshift/cluster-network-operator/pull/1922)
* OVN-Kubernetes: Add status subresource permissions for setting labels and annotations [#1896](https://github.com/openshift/cluster-network-operator/pull/1896)
* [SDN-3223](https://issues.redhat.com/browse/SDN-3223): Use encapsulation=true for IBM Cloud [#1800](https://github.com/openshift/cluster-network-operator/pull/1800)
* [Bug 16136](https://bugzilla.redhat.com/show_bug.cgi?id=16136): change whereabouts ip reconciler exec [#1890](https://github.com/openshift/cluster-network-operator/pull/1890)
* Add OpenStack platform to list of allowed dual-stack clusters [#1697](https://github.com/openshift/cluster-network-operator/pull/1697)
* [OCPBUGS-15945](https://issues.redhat.com/browse/OCPBUGS-15945): Stop using utilruntime.PanicHandlers to handle reconciliation panics [#1893](https://github.com/openshift/cluster-network-operator/pull/1893)
* [HOSTEDCP-1063](https://issues.redhat.com/browse/HOSTEDCP-1063): allow webhooks in hosted clusters to reach multus-admission-controller service [#1879](https://github.com/openshift/cluster-network-operator/pull/1879)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/d4f68c0e55c0f337a47ea7d9f5caaf239bc7b13f...9150a7b462705d7e87f7b0643ac37e877442ac53)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/4ca8e91f224f6937100d6f4d7d2a254cd40ca166)

* Add kubeconfig path for IBM Managed OpenShift (#810) [#810](https://github.com/openshift/cluster-node-tuning-operator/pull/810)
* Add k8s reporter to e2e tests (#666) [#666](https://github.com/openshift/cluster-node-tuning-operator/pull/666)
* [OCPBUGS-19459](https://issues.redhat.com/browse/OCPBUGS-19459): check for object being nil (#804) [#804](https://github.com/openshift/cluster-node-tuning-operator/pull/804)
* Memory manager E2E test fixes (#784) [#784](https://github.com/openshift/cluster-node-tuning-operator/pull/784)
* Some unit tests fail with go1.19 as some modules require 1.20 (#794) [#794](https://github.com/openshift/cluster-node-tuning-operator/pull/794)
* e2e: add expected max latancy to hwlatdetec test & rename constant (#719) [#719](https://github.com/openshift/cluster-node-tuning-operator/pull/719)
* [OCPBUGS-18662](https://issues.redhat.com/browse/OCPBUGS-18662): e2e:rps: improve logging (#787) [#787](https://github.com/openshift/cluster-node-tuning-operator/pull/787)
* Sync DaemonSet if operand image changes (#785) [#785](https://github.com/openshift/cluster-node-tuning-operator/pull/785)
* [OCPBUGS-18392](https://issues.redhat.com/browse/OCPBUGS-18392): Change the OVN trigger file name to adapt to OVN IC (#777) [#777](https://github.com/openshift/cluster-node-tuning-operator/pull/777)
* [OCPBUGS-15044](https://issues.redhat.com/browse/OCPBUGS-15044): e2e:irqloadbalance: wait for profile revert (#768) [#768](https://github.com/openshift/cluster-node-tuning-operator/pull/768)
* Add SetLogger() prior to controller-runtime start (#779) [#779](https://github.com/openshift/cluster-node-tuning-operator/pull/779)
* [OCPBUGS-18052](https://issues.redhat.com/browse/OCPBUGS-18052): feat: added logic to handle legacy sno install (#778) [#778](https://github.com/openshift/cluster-node-tuning-operator/pull/778)
* [OCPBUGS-17943](https://issues.redhat.com/browse/OCPBUGS-17943): Add rtentsk plugin to pp tuned profile (#767) [#767](https://github.com/openshift/cluster-node-tuning-operator/pull/767)
* Tighten the rules for modifying Tuned Profiles (#775) [#775](https://github.com/openshift/cluster-node-tuning-operator/pull/775)
* Revert "Tighten the rules for modifying Tuned Profiles (#765)" (#771) [#765](https://github.com/openshift/cluster-node-tuning-operator/pull/765)
* Tighten the rules for modifying Tuned Profiles (#765) [#765](https://github.com/openshift/cluster-node-tuning-operator/pull/765)
* [OCPBUGS-14026](https://issues.redhat.com/browse/OCPBUGS-14026): cgroup: Match the name of the cgroup to what is expected by kubelet (#758) [#758](https://github.com/openshift/cluster-node-tuning-operator/pull/758)
* e2e: irqbalance: improve test troubleshooting (#753) [#753](https://github.com/openshift/cluster-node-tuning-operator/pull/753)
* [OCPBUGS-16348](https://issues.redhat.com/browse/OCPBUGS-16348): OSLAT latency spikes due to tsc karg setting (#756) [#756](https://github.com/openshift/cluster-node-tuning-operator/pull/756)
* Makefile: hack: add helpers to compile testsuites (#751) [#751](https://github.com/openshift/cluster-node-tuning-operator/pull/751)
* [OCPBUGS-17219](https://issues.redhat.com/browse/OCPBUGS-17219): Render mode should not segfault w/ no matching MCP (#754) [#754](https://github.com/openshift/cluster-node-tuning-operator/pull/754)
* Release leader election on manager exit (#745) [#745](https://github.com/openshift/cluster-node-tuning-operator/pull/745)
* generate missing files (#752) [#752](https://github.com/openshift/cluster-node-tuning-operator/pull/752)
* vendor: bump OCP dependencies 08082023 (#750) [#750](https://github.com/openshift/cluster-node-tuning-operator/pull/750)
* [OCPBUGS-7980](https://issues.redhat.com/browse/OCPBUGS-7980): e2e:ht-aware: exec on the correct worker node (#729) [#729](https://github.com/openshift/cluster-node-tuning-operator/pull/729)
* bump k8s to 1.27.4 (#748) [#748](https://github.com/openshift/cluster-node-tuning-operator/pull/748)
* e2e: wait for objects deletion (#749) [#749](https://github.com/openshift/cluster-node-tuning-operator/pull/749)
* e2e:wait: return updated pod object explicitly (#744) [#744](https://github.com/openshift/cluster-node-tuning-operator/pull/744)
* [OCPBUGS-17258](https://issues.redhat.com/browse/OCPBUGS-17258): CVE-2023-3978: golang.org/x/net/html (#747) [#747](https://github.com/openshift/cluster-node-tuning-operator/pull/747)
* e2e: remove image parameter from must gather (#743) [#743](https://github.com/openshift/cluster-node-tuning-operator/pull/743)
* Update the `config.openshift.io/node` object's `cgroupMode` to "v1" (#737) [#737](https://github.com/openshift/cluster-node-tuning-operator/pull/737)
* Fix a race in e2e test rollback.go code (#739) [#739](https://github.com/openshift/cluster-node-tuning-operator/pull/739)
* e2e:irqbalance: applied condition exists (#727) [#727](https://github.com/openshift/cluster-node-tuning-operator/pull/727)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/75e8a95e5036280d651451a9ca1081fced771645...4ca8e91f224f6937100d6f4d7d2a254cd40ca166)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/5cef35a18deb1dbeb6854b710911ff36ab85b250)

* [OCPBUGS-19095](https://issues.redhat.com/browse/OCPBUGS-19095): Updating ose-cluster-olm-operator images to be consistent with ART [#31](https://github.com/openshift/cluster-olm-operator/pull/31)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/377bbaeb1bb5ed6ce295aae1fea9e906dced6220...5cef35a18deb1dbeb6854b710911ff36ab85b250)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/00f7e4cc95063ba5aba1992568088d924cfbf516)

* [WRKLDS-728](https://issues.redhat.com/browse/WRKLDS-728): Capabilities: drop build/apps APIService when capabilities are not enabled [#532](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/532)
* switch image-registry cert CM [#545](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/545)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/68ac0599366f8df30a24021ace66a1b9ba1b3688...00f7e4cc95063ba5aba1992568088d924cfbf516)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/5692d9b1f64e6e5a37a93da212dd4a1a657ffe44)

* [WRKLDS-806](https://issues.redhat.com/browse/WRKLDS-806): Bump kube dependencies to 1.28.2 [#305](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/305)
* [OCPBUGS-19136](https://issues.redhat.com/browse/OCPBUGS-19136): Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART [#304](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/304)
* [OCPBUGS-18932](https://issues.redhat.com/browse/OCPBUGS-18932): Always sort disabled controller list [#302](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/302)
* [OCPBUGS-18498](https://issues.redhat.com/browse/OCPBUGS-18498): Disable BuildConfigChange controller when Build cap is disabled [#299](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/299)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/e004b58bcbe1e592746ee1dabee60d41234da3d8...5692d9b1f64e6e5a37a93da212dd4a1a657ffe44)


### [cluster-platform-operators-manager](https://github.com/openshift/platform-operators/tree/7b8d9196c2e2956bc5b33e1759efb98c5c256ed3)

* [OCPBUGS-19118](https://issues.redhat.com/browse/OCPBUGS-19118): Updating ose-cluster-platform-operators-manager images to be consistent with ART [#91](https://github.com/openshift/platform-operators/pull/91)
* [Full changelog](https://github.com/openshift/platform-operators/compare/351aa1ed1e6a7c53d6aa016f6231124e6128f554...7b8d9196c2e2956bc5b33e1759efb98c5c256ed3)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/2b2da0c15bd8ea5f47f8330a06c583e20ed62727)

* [WRKLDS-806](https://issues.redhat.com/browse/WRKLDS-806): bump k8s to 1.28 [#132](https://github.com/openshift/cluster-policy-controller/pull/132)
* [OCPBUGS-19119](https://issues.redhat.com/browse/OCPBUGS-19119): Updating cluster-policy-controller images to be consistent with ART [#131](https://github.com/openshift/cluster-policy-controller/pull/131)
* [OCPBUGS-17458](https://issues.redhat.com/browse/OCPBUGS-17458): ps syncer: don't hotloop on a missing namespace [#130](https://github.com/openshift/cluster-policy-controller/pull/130)
* [OCPBUGS-17989](https://issues.redhat.com/browse/OCPBUGS-17989): pkg/psalabelsyncer: enforce syncing in case label is set [#129](https://github.com/openshift/cluster-policy-controller/pull/129)
* [AUTH-413](https://issues.redhat.com/browse/AUTH-413): ps syncer: only sync labels if noone else is managing them [#127](https://github.com/openshift/cluster-policy-controller/pull/127)
* ps syncer: add a controller for run-level 0 namespaces [#128](https://github.com/openshift/cluster-policy-controller/pull/128)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/8501bc8c4084b57cfa8978afd533cc912f17cf31...2b2da0c15bd8ea5f47f8330a06c583e20ed62727)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/ee6b13c57df016a8830cd1be50adec46347ac0ee)

* [OCPBUGS-18857](https://issues.redhat.com/browse/OCPBUGS-18857): Updating ose-cluster-samples-operator images to be consistent with ART [#517](https://github.com/openshift/cluster-samples-operator/pull/517)
* manifests: Drop explicit runlevel from CRD manifest [#515](https://github.com/openshift/cluster-samples-operator/pull/515)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/684b8c7f1cf6aaf9fb4f2bcffe91cde7eae07347...ee6b13c57df016a8830cd1be50adec46347ac0ee)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/426b85799ccfd6bb0e1ac3aa6d1b71b4e88bc490)

* [OCPBUGS-19073](https://issues.redhat.com/browse/OCPBUGS-19073): Add KAS label to aws-ebs-operator [#399](https://github.com/openshift/cluster-storage-operator/pull/399)
* [OCPBUGS-19184](https://issues.redhat.com/browse/OCPBUGS-19184): Updating cluster-storage-operator images to be consistent with ART [#398](https://github.com/openshift/cluster-storage-operator/pull/398)
* [STOR-1446](https://issues.redhat.com/browse/STOR-1446): Restart `vsphere-problem-detector-operator` Pods if `serving-cert` changed [#394](https://github.com/openshift/cluster-storage-operator/pull/394)
* [STOR-1274](https://issues.redhat.com/browse/STOR-1274): use granular permissons for Azure credential requests [#388](https://github.com/openshift/cluster-storage-operator/pull/388)
* [STOR-1432](https://issues.redhat.com/browse/STOR-1432): hypershift: pass through control plane images to AWS EBS CSI driver operator [#393](https://github.com/openshift/cluster-storage-operator/pull/393)
* [STOR-1432](https://issues.redhat.com/browse/STOR-1432): hypershift: add independent refs for AWS EBS driver controller images [#392](https://github.com/openshift/cluster-storage-operator/pull/392)
* [OCPBUGS-17356](https://issues.redhat.com/browse/OCPBUGS-17356): Fix PodStartupStorageOperationsFailing alert [#391](https://github.com/openshift/cluster-storage-operator/pull/391)
* Remove "get" verb from "events" resource of RBAC for provisioner sidecar [#390](https://github.com/openshift/cluster-storage-operator/pull/390)
* [OCPBUGS-11359](https://issues.redhat.com/browse/OCPBUGS-11359): Remove unused versions from status [#374](https://github.com/openshift/cluster-storage-operator/pull/374)
* [OCPBUGS-16783](https://issues.redhat.com/browse/OCPBUGS-16783): Chore: Update OWNERS [#389](https://github.com/openshift/cluster-storage-operator/pull/389)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/6d96ffe6841ecfe426e3d2c0b4f11fcadeaa0db1...426b85799ccfd6bb0e1ac3aa6d1b71b4e88bc490)


### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/804dfeceb7caa41a6212fb405bbcd3f3139b8a6f)

* [OCPBUGS-19189](https://issues.redhat.com/browse/OCPBUGS-19189): Updating ose-cluster-update-keys images to be consistent with ART [#51](https://github.com/openshift/cluster-update-keys/pull/51)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/9dd3eedebc62725e806d7b52d640b70e61a96f98...804dfeceb7caa41a6212fb405bbcd3f3139b8a6f)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/ddbf138b75f85bb880ec377bae389d060291298a)

* [OCPBUGS-19512](https://issues.redhat.com/browse/OCPBUGS-19512): pkg/clusterconditions/promql: Warm cache with 1s delay [#939](https://github.com/openshift/cluster-version-operator/pull/939)
* [OCPBUGS-18386](https://issues.redhat.com/browse/OCPBUGS-18386): Properly reconcile SCC resources [#966](https://github.com/openshift/cluster-version-operator/pull/966)
* [OTA-854](https://issues.redhat.com/browse/OTA-854): Add configurable CVO knobs for risk-evaluation PromQL target [#926](https://github.com/openshift/cluster-version-operator/pull/926)
* [OCPBUGS-18984](https://issues.redhat.com/browse/OCPBUGS-18984): pkg/payload/precondition/clusterversion/etcdbackup: Drop precondition [#968](https://github.com/openshift/cluster-version-operator/pull/968)
* [OCPBUGS-19222](https://issues.redhat.com/browse/OCPBUGS-19222): Updating cluster-version-operator images to be consistent with ART [#970](https://github.com/openshift/cluster-version-operator/pull/970)
* [OCPBUGS-18567](https://issues.redhat.com/browse/OCPBUGS-18567): lib/resourcemerge/apps: Cover paused and other spec properties in EnsureDeployment [#965](https://github.com/openshift/cluster-version-operator/pull/965)
* [OCPBUGS-13308](https://issues.redhat.com/browse/OCPBUGS-13308): Simplify user-facing messages on risk evaluation throttling [#955](https://github.com/openshift/cluster-version-operator/pull/955)
* [OCPBUGS-17418](https://issues.redhat.com/browse/OCPBUGS-17418): Really handle DeletedFinalStateUnknown correctly [#954](https://github.com/openshift/cluster-version-operator/pull/954)
* [CNF-9385](https://issues.redhat.com/browse/CNF-9385): add ImageRegistry capability [#950](https://github.com/openshift/cluster-version-operator/pull/950)
* [OCPBUGS-17418](https://issues.redhat.com/browse/OCPBUGS-17418): Handle cache.DeletedFinalStateUnknown [#952](https://github.com/openshift/cluster-version-operator/pull/952)
* docs/user/tasks-*by-number-and-component.svg: Update to 4.13 [#949](https://github.com/openshift/cluster-version-operator/pull/949)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/216683cfc09eebefd87bed66849d52b6a357c5ab...ddbf138b75f85bb880ec377bae389d060291298a)


### [configmap-reloader](https://github.com/openshift/configmap-reload/tree/4b2efe5ce6af3f345b56194baabddb83083df577)

* [OCPBUGS-19171](https://issues.redhat.com/browse/OCPBUGS-19171): Updating configmap-reload images to be consistent with ART [#56](https://github.com/openshift/configmap-reload/pull/56)
* [Full changelog](https://github.com/openshift/configmap-reload/compare/716a0c33bb693127fba3b3512622710785a59e8e...4b2efe5ce6af3f345b56194baabddb83083df577)


### [console](https://github.com/openshift/console/tree/1e8d1ab7b6440b6ea96f72cb2dec1209aa314dcd)

* [ODC-7391](https://issues.redhat.com/browse/ODC-7391): Add a new allowInsecure option to the internet proxy API [#13175](https://github.com/openshift/console/pull/13175)
* [OCPBUGS-19743](https://issues.redhat.com/browse/OCPBUGS-19743): Fix Invalid URL crash [#13192](https://github.com/openshift/console/pull/13192)
* [OCPBUGS-18267](https://issues.redhat.com/browse/OCPBUGS-18267): 404 - not found will show on Knative-serving Details page [#13156](https://github.com/openshift/console/pull/13156)
* [OCPBUGS-17676](https://issues.redhat.com/browse/OCPBUGS-17676): Enable white space retain in resource logs [#13101](https://github.com/openshift/console/pull/13101)
* [OCPBUGS-4426](https://issues.redhat.com/browse/OCPBUGS-4426): All Projects' dropdown": Roles and RoleBindings "before all" hook for "test Roles detail page breadcrumbs to list page restores [#13190](https://github.com/openshift/console/pull/13190)
* [OCPBUGS-8777](https://issues.redhat.com/browse/OCPBUGS-8777): Don't redirect after logout from login error route [#13102](https://github.com/openshift/console/pull/13102)
* [OCPBUGS-9157](https://issues.redhat.com/browse/OCPBUGS-9157): ‘Create Pod’ button should be disabled for normal user … [#13040](https://github.com/openshift/console/pull/13040)
* [OCPBUGS-19640](https://issues.redhat.com/browse/OCPBUGS-19640): Dont render ARN mode role field and warning for HyperShift clusters [#13191](https://github.com/openshift/console/pull/13191)
* [OCPBUGS-19437](https://issues.redhat.com/browse/OCPBUGS-19437): API docs content issue [#13180](https://github.com/openshift/console/pull/13180)
* [OCPBUGS-19546](https://issues.redhat.com/browse/OCPBUGS-19546): Set unlimited line width in YAML editor [#13182](https://github.com/openshift/console/pull/13182)
* [OCPBUGS-19413](https://issues.redhat.com/browse/OCPBUGS-19413): Fix demo dynamic plugin dev mode cypress tests [#13172](https://github.com/openshift/console/pull/13172)
* [OCPBUGS-19367](https://issues.redhat.com/browse/OCPBUGS-19367): Console should not panic when no response is retrieved for plugin assets [#13166](https://github.com/openshift/console/pull/13166)
* [OCPBUGS-19394](https://issues.redhat.com/browse/OCPBUGS-19394): document kebab menu cell props [#13177](https://github.com/openshift/console/pull/13177)
* [OCPBUGS-13152](https://issues.redhat.com/browse/OCPBUGS-13152): fetch TaskRuns without selector and reduces the get TaskRuns requests [#13065](https://github.com/openshift/console/pull/13065)
* [OCPBUGS-9719](https://issues.redhat.com/browse/OCPBUGS-9719): Correct logout process [#10177](https://github.com/openshift/console/pull/10177)
* [OCPBUGS-18832](https://issues.redhat.com/browse/OCPBUGS-18832): change resource icon for FenceAgentRemediationTemplate… [#13162](https://github.com/openshift/console/pull/13162)
* [OCPBUGS-18996](https://issues.redhat.com/browse/OCPBUGS-18996): fix issues with refactored "Create StorageClass" form [#13153](https://github.com/openshift/console/pull/13153)
* [OCPBUGS-19173](https://issues.redhat.com/browse/OCPBUGS-19173): Updating openshift-enterprise-console images to be consistent with ART [#13157](https://github.com/openshift/console/pull/13157)
* [OCPBUGS-11286](https://issues.redhat.com/browse/OCPBUGS-11286): Check if filtered object contains name property [#12810](https://github.com/openshift/console/pull/12810)
* [OCPBUGS-18464](https://issues.redhat.com/browse/OCPBUGS-18464): Hide the Builds NavItem if BuildConfig is not installed in the cluster [#13141](https://github.com/openshift/console/pull/13141)
* [OCPBUGS-18494](https://issues.redhat.com/browse/OCPBUGS-18494): Upgrade DomainMapping apiVersion to v1beta1 [#13133](https://github.com/openshift/console/pull/13133)
* [OCPBUGS-19314](https://issues.redhat.com/browse/OCPBUGS-19314): Hide the DeploymentConfig option in the User Preferences if that resource type isn't available [#13130](https://github.com/openshift/console/pull/13130)
* [OCPBUGS-6515](https://issues.redhat.com/browse/OCPBUGS-6515): address ConsoleExternalLogLink test flake [#13110](https://github.com/openshift/console/pull/13110)
* [OCPBUGS-9285](https://issues.redhat.com/browse/OCPBUGS-9285): Remove redundant break line [#13109](https://github.com/openshift/console/pull/13109)
* [OCPBUGS-5571](https://issues.redhat.com/browse/OCPBUGS-5571): Update API docs content based on docs review [#13108](https://github.com/openshift/console/pull/13108)
* [OCPBUGS-3403](https://issues.redhat.com/browse/OCPBUGS-3403): Fix resource table sorting crash [#13103](https://github.com/openshift/console/pull/13103)
* [OCPBUGS-17203](https://issues.redhat.com/browse/OCPBUGS-17203): mock apis for git repo in test serverless function tests [#13064](https://github.com/openshift/console/pull/13064)
* [OCPBUGS-19313](https://issues.redhat.com/browse/OCPBUGS-19313): Hide DeploymentConfig option from forms when it's not installed in the cluster [#13129](https://github.com/openshift/console/pull/13129)
* [OCPBUGS-19311](https://issues.redhat.com/browse/OCPBUGS-19311): Unhide the Import From Git Tab on the Add page if Pipelines Operator is installed and BuildConfig is not installed in the cluster [#13128](https://github.com/openshift/console/pull/13128)
* [OCPBUGS-18188](https://issues.redhat.com/browse/OCPBUGS-18188): Added React Icon [#13111](https://github.com/openshift/console/pull/13111)
* [OCPBUGS-18485](https://issues.redhat.com/browse/OCPBUGS-18485): Monitoring: Fix display of silenced alerts in dev console [#13151](https://github.com/openshift/console/pull/13151)
* [OCPBUGS-6513](https://issues.redhat.com/browse/OCPBUGS-6513): Fixed Edit Application form for Knative Services [#12832](https://github.com/openshift/console/pull/12832)
* [OCPBUGS-129](https://issues.redhat.com/browse/OCPBUGS-129): bump @patternfly/react-core to v4.276.11 to pick up Sele… [#13092](https://github.com/openshift/console/pull/13092)
* [OCPBUGS-18439](https://issues.redhat.com/browse/OCPBUGS-18439): use active namespace in Create cta href of create action for operator backed [#13132](https://github.com/openshift/console/pull/13132)
* [OCPBUGS-18686](https://issues.redhat.com/browse/OCPBUGS-18686): Fix incorrect export of useLabelsModal in dynamic plug… [#13142](https://github.com/openshift/console/pull/13142)
* [OCPBUGS-18604](https://issues.redhat.com/browse/OCPBUGS-18604): [knative] Don't rely on openshift/hello-openshift as a sample image [#13134](https://github.com/openshift/console/pull/13134)
* [OCPBUGS-18094](https://issues.redhat.com/browse/OCPBUGS-18094): Remove cluster filter and menu group title [#13137](https://github.com/openshift/console/pull/13137)
* [OCPBUGS-18348](https://issues.redhat.com/browse/OCPBUGS-18348): Add deprecation alert for DeploymentConfig [#12968](https://github.com/openshift/console/pull/12968)
* [OCPBUGS-13359](https://issues.redhat.com/browse/OCPBUGS-13359): Fix crash when filtering the quick start catalog [#13126](https://github.com/openshift/console/pull/13126)
* [OCPBUGS-18306](https://issues.redhat.com/browse/OCPBUGS-18306): fix useDeleteModal Example formatting [#13117](https://github.com/openshift/console/pull/13117)
* [OCPBUGS-18406](https://issues.redhat.com/browse/OCPBUGS-18406): Builds navigation item is missing in Developer perspective [#13124](https://github.com/openshift/console/pull/13124)
* [OCPBUGS-17341](https://issues.redhat.com/browse/OCPBUGS-17341): OCP console mandate secret for repository creation [#13084](https://github.com/openshift/console/pull/13084)
* [OCPBUGS-16108](https://issues.redhat.com/browse/OCPBUGS-16108): Fix DeploymentConfig list performance issues by lazy loading their ReplicationControllers [#13118](https://github.com/openshift/console/pull/13118)
* [CONSOLE-3126](https://issues.redhat.com/browse/CONSOLE-3126): Update cluster paused alert message [#13106](https://github.com/openshift/console/pull/13106)
* [OCPBUGS-17864](https://issues.redhat.com/browse/OCPBUGS-17864): Web console slowness on Project>Project access page [#13099](https://github.com/openshift/console/pull/13099)
* [OCPBUGS-17981](https://issues.redhat.com/browse/OCPBUGS-17981): Remove DeploymentConfig, Build and BuildConfig sections from navigation and use flags so they can be enabled by cluster admins [#13089](https://github.com/openshift/console/pull/13089)
* [OCPBUGS-9182](https://issues.redhat.com/browse/OCPBUGS-9182): Enable default-container annotation to specify the default container for logs and terminal. [#13098](https://github.com/openshift/console/pull/13098)
* [OCPBUGS-17913](https://issues.redhat.com/browse/OCPBUGS-17913): Typo in the OCP console menu [#13096](https://github.com/openshift/console/pull/13096)
* [OCPBUGS-17948](https://issues.redhat.com/browse/OCPBUGS-17948): Fix that Devconsole plugin show essential features like add page and topology also when Builds and DeploymentConfigs capabilities are disabled [#13097](https://github.com/openshift/console/pull/13097)
* [OCPBUGS-13892](https://issues.redhat.com/browse/OCPBUGS-13892): Remove spaces from prometheus queries [#13043](https://github.com/openshift/console/pull/13043)
* [OCPBUGS-15927](https://issues.redhat.com/browse/OCPBUGS-15927): Error page when fresh normal user visiting BuildConfigs page of 'default' project [#13091](https://github.com/openshift/console/pull/13091)
* [OCPBUGS-16374](https://issues.redhat.com/browse/OCPBUGS-16374): Fix topology crash when a console.topology/data/factory extension tries to resolve a resource with version from the CRDs which doesn't exists [#13093](https://github.com/openshift/console/pull/13093)
* [CONSOLE-3327](https://issues.redhat.com/browse/CONSOLE-3327): Expose useActiveNamespace within dynamic-core-api [#13033](https://github.com/openshift/console/pull/13033)
* [OCPBUGS-17595](https://issues.redhat.com/browse/OCPBUGS-17595): Updating YAML from console shows error [#13090](https://github.com/openshift/console/pull/13090)
* [OU-206](https://issues.redhat.com/browse/OU-206): Merge monitoring alerts with alerts from other sources in the dev console [#12940](https://github.com/openshift/console/pull/12940)
* [CONSOLE-3681](https://issues.redhat.com/browse/CONSOLE-3681): Convert storage-class-form.tsx from class component to … [#13036](https://github.com/openshift/console/pull/13036)
* [OCPBUGS-17496](https://issues.redhat.com/browse/OCPBUGS-17496): Bridge NAD should set "preserveDefaultVlan": false [#13076](https://github.com/openshift/console/pull/13076)
* [CONSOLE-3126](https://issues.redhat.com/browse/CONSOLE-3126): Remove paused state since its no longer relevant due to 4.14 changes … [#13072](https://github.com/openshift/console/pull/13072)
* [OCPBUGS-17515](https://issues.redhat.com/browse/OCPBUGS-17515): Console UI is broken due to patternfly/react-core version change [#13086](https://github.com/openshift/console/pull/13086)
* [OCPBUGS-17504](https://issues.redhat.com/browse/OCPBUGS-17504): Dev console: Remove checkboxes on Alert Details page Silenced By list [#13085](https://github.com/openshift/console/pull/13085)
* [OCPBUGS-16717](https://issues.redhat.com/browse/OCPBUGS-16717): Fix name validation regex [#13075](https://github.com/openshift/console/pull/13075)
* [OCPBUGS-17410](https://issues.redhat.com/browse/OCPBUGS-17410): Fix that "Delete application" doesn't work in topology when Pipelines operator is not installed [#13074](https://github.com/openshift/console/pull/13074)
* [OCPBUGS-14138](https://issues.redhat.com/browse/OCPBUGS-14138): Console fix [#13078](https://github.com/openshift/console/pull/13078)
* [OCPBUGS-15458](https://issues.redhat.com/browse/OCPBUGS-15458): Links for console-dynamic-plugin-sdk markdown docs are not working [#13062](https://github.com/openshift/console/pull/13062)
* [OCPBUGS-129](https://issues.redhat.com/browse/OCPBUGS-129): bump @patternfly/react-core to v4.276.11 to pick up Sel… [#13052](https://github.com/openshift/console/pull/13052)
* [OCPBUGS-17234](https://issues.redhat.com/browse/OCPBUGS-17234): change Command Line Tools text [#13068](https://github.com/openshift/console/pull/13068)
* [OCPBUGS-17347](https://issues.redhat.com/browse/OCPBUGS-17347): Fix "View alerting rule" action URL [#13058](https://github.com/openshift/console/pull/13058)
* [OCPBUGS-15419](https://issues.redhat.com/browse/OCPBUGS-15419): Title on Overview page has changed to "Cluster · Red Hat OpenShift" [#12951](https://github.com/openshift/console/pull/12951)
* [OCPBUGS-13387](https://issues.redhat.com/browse/OCPBUGS-13387), [OCPBUGS-16693](https://issues.redhat.com/browse/OCPBUGS-16693): Import page create button is disabled due to PAC validation [#13046](https://github.com/openshift/console/pull/13046)
* [CONSOLE-3683](https://issues.redhat.com/browse/CONSOLE-3683): Convert FireMan component in list-page.tsx from class c… [#13024](https://github.com/openshift/console/pull/13024)
* [OU-231](https://issues.redhat.com/browse/OU-231): Add jgbernalp and zhuje to OWNERS for monitoring [#13069](https://github.com/openshift/console/pull/13069)
* [OCPBUGS-17196](https://issues.redhat.com/browse/OCPBUGS-17196): Fix nad ovn type - annotation and netAttachName [#13053](https://github.com/openshift/console/pull/13053)
* [OCPBUGS-16844](https://issues.redhat.com/browse/OCPBUGS-16844): external link icon in `resource added` toast notification not linked [#13057](https://github.com/openshift/console/pull/13057)
* [OCPBUGS-15310](https://issues.redhat.com/browse/OCPBUGS-15310): Helm Chart installation modal "Documentation" field is always N/A [#13032](https://github.com/openshift/console/pull/13032)
* [CONSOLE-3686](https://issues.redhat.com/browse/CONSOLE-3686): Convert SecretFormWrapper component in create-secret.ts… [#13017](https://github.com/openshift/console/pull/13017)
* [OCPBUGS-15008](https://issues.redhat.com/browse/OCPBUGS-15008): update the KnativeServing API version to v1beta1 for global-config extension [#13059](https://github.com/openshift/console/pull/13059)
* [CONSOLE-3679](https://issues.redhat.com/browse/CONSOLE-3679): Convert instantiate-template.tsx from class component t… [#12947](https://github.com/openshift/console/pull/12947)
* [CONSOLE-3568](https://issues.redhat.com/browse/CONSOLE-3568): expose DeleteModal via useDeleteModal hook in @console/shared [#12974](https://github.com/openshift/console/pull/12974)
* [CONSOLE-3677](https://issues.redhat.com/browse/CONSOLE-3677): Convert edit-yaml.jsx from class component to functiona… [#12973](https://github.com/openshift/console/pull/12973)
* [CONSOLE-3678](https://issues.redhat.com/browse/CONSOLE-3678): Convert EventStream component in events.jsx from class … [#12989](https://github.com/openshift/console/pull/12989)
* [OCPBUGS-16093](https://issues.redhat.com/browse/OCPBUGS-16093), [OCPBUGS-16270](https://issues.redhat.com/browse/OCPBUGS-16270), [OCPBUGS-9409](https://issues.redhat.com/browse/OCPBUGS-9409): Creation of GH webhook and attaching it to repo while importing from git using PAC [#13021](https://github.com/openshift/console/pull/13021)
* [CONSOLE-3682](https://issues.redhat.com/browse/CONSOLE-3682): Convert components in cluster-settings folder from clas… [#13011](https://github.com/openshift/console/pull/13011)
* [CONSOLE-3676](https://issues.redhat.com/browse/CONSOLE-3676): Convert app.jsx from class component to functional comp… [#12952](https://github.com/openshift/console/pull/12952)
* [OU-175](https://issues.redhat.com/browse/OU-175): Monitoring: Add "Silences" tab to Developer console [#12900](https://github.com/openshift/console/pull/12900)
* [OCPBUGS-10884](https://issues.redhat.com/browse/OCPBUGS-10884): propagate mpath device type to request data [#13022](https://github.com/openshift/console/pull/13022)
* [OCPBUGS-16656](https://issues.redhat.com/browse/OCPBUGS-16656): Devfile import fails on master branch [#13050](https://github.com/openshift/console/pull/13050)
* [OCPBUGS-9355](https://issues.redhat.com/browse/OCPBUGS-9355): Fix translation bug [#13049](https://github.com/openshift/console/pull/13049)
* [OCPBUGS-3495](https://issues.redhat.com/browse/OCPBUGS-3495): Add cacheBuster query string when requesting plugin entry scripts [#13035](https://github.com/openshift/console/pull/13035)
* [Full changelog](https://github.com/openshift/console/compare/edfb3791d658a42d08a8d9b8d67c020b28055563...1e8d1ab7b6440b6ea96f72cb2dec1209aa314dcd)


### [console-operator](https://github.com/openshift/console-operator/tree/483bbcfcf019a58afb70ae1b021ba01e074b09e0)

* [CONSOLE-3438](https://issues.redhat.com/browse/CONSOLE-3438): Switch to using assets [#783](https://github.com/openshift/console-operator/pull/783)
* [OCPBUGS-17424](https://issues.redhat.com/browse/OCPBUGS-17424): Really handle DeletedFinalStateUnknown correctly [#786](https://github.com/openshift/console-operator/pull/786)
* [OCPBUGS-17424](https://issues.redhat.com/browse/OCPBUGS-17424): Handle cache.DeletedFinalStateUnknown correctly [#785](https://github.com/openshift/console-operator/pull/785)
* chore: manifests/09-console-link-*: Drop obsolete deletion manifests [#784](https://github.com/openshift/console-operator/pull/784)
* [Full changelog](https://github.com/openshift/console-operator/compare/cb08a319271b2f4676d1faae96a5ab10440facb0...483bbcfcf019a58afb70ae1b021ba01e074b09e0)


### [container-networking-plugins](https://github.com/openshift/containernetworking-plugins/tree/80a8df0501fb11fc20369196b3a89011eed77d60)

* [OCPBUGS-19127](https://issues.redhat.com/browse/OCPBUGS-19127): Updating ose-containernetworking-plugins images to be consistent with ART [#122](https://github.com/openshift/containernetworking-plugins/pull/122)
* [OCPBUGS-17681](https://issues.redhat.com/browse/OCPBUGS-17681): Default CNI binaries to RHEL 8 [#116](https://github.com/openshift/containernetworking-plugins/pull/116)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/1d2b1f63fca16699eedc71fb400afd65eefbfed2...80a8df0501fb11fc20369196b3a89011eed77d60)


### [coredns](https://github.com/openshift/coredns/tree/ac051aa4594463c262d2a479af01065ef08b02d0)

* [OCPBUGS-13968](https://issues.redhat.com/browse/OCPBUGS-13968): Merge 1.11.1 [#94](https://github.com/openshift/coredns/pull/94)
* [OCPBUGS-19216](https://issues.redhat.com/browse/OCPBUGS-19216): Updating coredns images to be consistent with ART [#95](https://github.com/openshift/coredns/pull/95)
* [Full changelog](https://github.com/openshift/coredns/compare/a2c62dd3976b27d6a45e273532c63ba914700917...ac051aa4594463c262d2a479af01065ef08b02d0)


### [csi-driver-shared-resource, csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource/tree/51ef8fd98f4ca33add6958a6afdb9a8befa5ddcc)

* [OCPBUGS-19291](https://issues.redhat.com/browse/OCPBUGS-19291): Updating ose-csi-driver-shared-resource-mustgather images to be consistent with ART [#144](https://github.com/openshift/csi-driver-shared-resource/pull/144)
* [OCPBUGS-19155](https://issues.redhat.com/browse/OCPBUGS-19155): Updating ose-csi-driver-shared-resource-webhook images to be consistent with ART [#142](https://github.com/openshift/csi-driver-shared-resource/pull/142)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource/compare/19ba62783892161cbe39f46dd923df5061d372ad...51ef8fd98f4ca33add6958a6afdb9a8befa5ddcc)


### [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator/tree/b0d6576c05bb06dfce4bb34b47291def5fa621be)

* [OCPBUGS-19246](https://issues.redhat.com/browse/OCPBUGS-19246): Updating ose-csi-driver-shared-resource-operator images to be consistent with ART [#84](https://github.com/openshift/csi-driver-shared-resource-operator/pull/84)
* [STOR-1442](https://issues.redhat.com/browse/STOR-1442): Restart webhook Pods if webhook-serving-cert changed [#83](https://github.com/openshift/csi-driver-shared-resource-operator/pull/83)
* [STOR-1441](https://issues.redhat.com/browse/STOR-1441): Restart node Pods if metrics-serving-cert changed [#82](https://github.com/openshift/csi-driver-shared-resource-operator/pull/82)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource-operator/compare/c1368dc37f4729caf6e001d4a401b6aa76b3e718...b0d6576c05bb06dfce4bb34b47291def5fa621be)


### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/e6641cbfcbac510c2895d2ca1e11519e240045e7)

* [OCPBUGS-19225](https://issues.redhat.com/browse/OCPBUGS-19225): Updating csi-attacher images to be consistent with ART [#57](https://github.com/openshift/csi-external-attacher/pull/57)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/a8645eba126ccd41300fbf629db352085e2a02c4...e6641cbfcbac510c2895d2ca1e11519e240045e7)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/55635b940d15d5edc9a9d225ec987a31aed45829)

* [OCPBUGS-19114](https://issues.redhat.com/browse/OCPBUGS-19114): Updating csi-provisioner images to be consistent with ART [#69](https://github.com/openshift/csi-external-provisioner/pull/69)
* [OCPBUGS-17264](https://issues.redhat.com/browse/OCPBUGS-17264): USPTREAM: 969: build(deps): bump golang.org/x/tools from 0.9.3 to 0.12.0 [#68](https://github.com/openshift/csi-external-provisioner/pull/68)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/3832852db71c55877fcf98f380bf376678359e8c...55635b940d15d5edc9a9d225ec987a31aed45829)


### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/89aa5be2801b0e04fffabb4defa63e3735d701d8)

* [OCPBUGS-19224](https://issues.redhat.com/browse/OCPBUGS-19224): Updating ose-csi-external-resizer images to be consistent with ART [#144](https://github.com/openshift/csi-external-resizer/pull/144)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/9a76f330d7a03cfce9dbbb71f25febe3efc9271b...89aa5be2801b0e04fffabb4defa63e3735d701d8)


### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/fd88424cce8555ec05a7be98640583b5d921ba4e)

* [OCPBUGS-19260](https://issues.redhat.com/browse/OCPBUGS-19260): Updating csi-snapshot-validation-webhook images to be consistent with ART [#106](https://github.com/openshift/csi-external-snapshotter/pull/106)
* [OCPBUGS-19223](https://issues.redhat.com/browse/OCPBUGS-19223): Updating ose-csi-external-snapshotter images to be consistent with ART [#105](https://github.com/openshift/csi-external-snapshotter/pull/105)
* [OCPBUGS-19100](https://issues.redhat.com/browse/OCPBUGS-19100): Updating ose-csi-snapshot-controller images to be consistent with ART [#104](https://github.com/openshift/csi-external-snapshotter/pull/104)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/712bf7c316adfa0a3c8afc56d1db23abfadad58e...fd88424cce8555ec05a7be98640583b5d921ba4e)


### [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe/tree/36c8f5510833e888e1ea89292343c762e1cd529d)

* [OCPBUGS-19132](https://issues.redhat.com/browse/OCPBUGS-19132): Updating csi-livenessprobe images to be consistent with ART [#47](https://github.com/openshift/csi-livenessprobe/pull/47)
* [Full changelog](https://github.com/openshift/csi-livenessprobe/compare/957e1d03570e07fb0825813ab7b751bc8543ebc2...36c8f5510833e888e1ea89292343c762e1cd529d)


### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/be26abd621ac7c7abb59b3bd9d15cf9abbf0a2f9)

* [OCPBUGS-19247](https://issues.redhat.com/browse/OCPBUGS-19247): Updating csi-node-driver-registrar images to be consistent with ART [#49](https://github.com/openshift/csi-node-driver-registrar/pull/49)
* [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/f8635f761f8f59b76c1056034fc5addb29071cfe...be26abd621ac7c7abb59b3bd9d15cf9abbf0a2f9)


### [docker-builder](https://github.com/openshift/builder/tree/daef8d24b471d86b6e721a660828fae67fb32f32)

* [OCPBUGS-18855](https://issues.redhat.com/browse/OCPBUGS-18855): Updating openshift-enterprise-builder images to be consistent with ART [#357](https://github.com/openshift/builder/pull/357)
* [BUILD-432](https://issues.redhat.com/browse/BUILD-432): mount secrets as "overlay" mounts [#349](https://github.com/openshift/builder/pull/349)
* [Full changelog](https://github.com/openshift/builder/compare/8e748fa4c25735a42be1c64bc4ea539102ab24bb...daef8d24b471d86b6e721a660828fae67fb32f32)


### [docker-registry](https://github.com/openshift/image-registry/tree/742343bb0aff14f2f987847baf2a83075ef06d68)

* [OCPBUGS-19154](https://issues.redhat.com/browse/OCPBUGS-19154): Updating openshift-enterprise-registry images to be consistent with ART [#379](https://github.com/openshift/image-registry/pull/379)
* [OCPBUGS-18999](https://issues.redhat.com/browse/OCPBUGS-18999): increase rest.Config QPS and Burst [#380](https://github.com/openshift/image-registry/pull/380)
* [OCPBUGS-17975](https://issues.redhat.com/browse/OCPBUGS-17975): Support both icsp and idms [#375](https://github.com/openshift/image-registry/pull/375)
* [Full changelog](https://github.com/openshift/image-registry/compare/d473f35223305fcf9e500962947facb2b9524fa2...742343bb0aff14f2f987847baf2a83075ef06d68)


### [egress-router-cni](https://github.com/openshift/egress-router-cni/tree/9cc0f205ff5055476b4e972c64ec09c40f59756e)

* [OCPBUGS-19258](https://issues.redhat.com/browse/OCPBUGS-19258): Updating egress-router-cni images to be consistent with ART [#76](https://github.com/openshift/egress-router-cni/pull/76)
* [Full changelog](https://github.com/openshift/egress-router-cni/compare/657df81bd4b17181dca5a8c4cf3f1f0f803ac5dc...9cc0f205ff5055476b4e972c64ec09c40f59756e)


### [etcd](https://github.com/openshift/etcd/tree/6fc69d5d835662c88d21fe2ebed024d87b245f88)

* [OCPBUGS-18179](https://issues.redhat.com/browse/OCPBUGS-18179): UPSTREAM <carry>: update build images to rhel9 [#211](https://github.com/openshift/etcd/pull/211)
* [Full changelog](https://github.com/openshift/etcd/compare/5a36b9b6b329d92d7c26d1c944e6b1192f9d1523...6fc69d5d835662c88d21fe2ebed024d87b245f88)


### [haproxy-router](https://github.com/openshift/router/tree/f142a3a4f2890527d6b22c211faf04f34ed86625)

* [OCPBUGS-19287](https://issues.redhat.com/browse/OCPBUGS-19287): Updating openshift-enterprise-haproxy-router images to be consistent with ART [#513](https://github.com/openshift/router/pull/513)
* [OCPBUGS-19249](https://issues.redhat.com/browse/OCPBUGS-19249): Updating ose-haproxy-router-base images to be consistent with ART [#512](https://github.com/openshift/router/pull/512)
* [OCPBUGS-16707](https://issues.redhat.com/browse/OCPBUGS-16707): UniqueHost: Fix incorrect identification of conflicting route [#508](https://github.com/openshift/router/pull/508)
* [OCPBUGS-17653](https://issues.redhat.com/browse/OCPBUGS-17653): haproxy/template: mitigate CVE-2023-40225 [#505](https://github.com/openshift/router/pull/505)
* [NE-1141](https://issues.redhat.com/browse/NE-1141): Adds logic for setting and deleting headers via Ingress Operator CR and Route Object. [#438](https://github.com/openshift/router/pull/438)
* [OCPBUGS-16623](https://issues.redhat.com/browse/OCPBUGS-16623): properly handle weight=0 [#499](https://github.com/openshift/router/pull/499)
* [Full changelog](https://github.com/openshift/router/compare/6117b7ba414c7073274e2d19c43082031393ccd7...f142a3a4f2890527d6b22c211faf04f34ed86625)


### [hypershift](https://github.com/openshift/hypershift/tree/696f8d536c3e55e354f56c71742f532d3601220b)

* [OCPBUGS-15215](https://issues.redhat.com/browse/OCPBUGS-15215): OAuth template config in HostedCluter.configuration.ouath is not honored in HyperShift [#3041](https://github.com/openshift/hypershift/pull/3041)
* Update RHTAP references (main) [#3042](https://github.com/openshift/hypershift/pull/3042)
* [OCPBUGS-19271](https://issues.redhat.com/browse/OCPBUGS-19271): Updating hypershift images to be consistent with ART [#3017](https://github.com/openshift/hypershift/pull/3017)
* Update kubevirt csi driver deployment with proper timeouts [#3044](https://github.com/openshift/hypershift/pull/3044)
* [OCPBUGS-19516](https://issues.redhat.com/browse/OCPBUGS-19516): Upgrade agent APIs to v1beta1 [#3022](https://github.com/openshift/hypershift/pull/3022)
* [kubevirt platform] Detect Suboptimal MTU and raise HostedCluster Condition accordingly [#2976](https://github.com/openshift/hypershift/pull/2976)
* [OCPBUGS-19674](https://issues.redhat.com/browse/OCPBUGS-19674): Report correct port when API exposed via route [#3037](https://github.com/openshift/hypershift/pull/3037)
* [OCPBUGS-13829](https://issues.redhat.com/browse/OCPBUGS-13829): set accesstoken-inactivity-timeout flag to openshift-oauth-apiserver [#3025](https://github.com/openshift/hypershift/pull/3025)
* [HOSTEDCP-1209](https://issues.redhat.com/browse/HOSTEDCP-1209): set ubi Containerfile labels [#3039](https://github.com/openshift/hypershift/pull/3039)
* Use example versions for KubeVirt platform that are supported [#3027](https://github.com/openshift/hypershift/pull/3027)
* [OCPBUGS-17669](https://issues.redhat.com/browse/OCPBUGS-17669): Remove cluster name validation from HCC [#3036](https://github.com/openshift/hypershift/pull/3036)
* KubeVirt: document VMs logs collection [#3031](https://github.com/openshift/hypershift/pull/3031)
* Update RHTAP references (main) [#3033](https://github.com/openshift/hypershift/pull/3033)
* [OCPBUGS-19381](https://issues.redhat.com/browse/OCPBUGS-19381): Let NodePools skip min version when SkipReleaseImageValidation is in HC [#3024](https://github.com/openshift/hypershift/pull/3024)
* [OCPBUGS-19346](https://issues.redhat.com/browse/OCPBUGS-19346): set default deploymentconfig params on AWS CCM [#3021](https://github.com/openshift/hypershift/pull/3021)
* [ACM-7278](https://issues.redhat.com/browse/ACM-7278): Remove marking pull secret as required in hcp cli [#3013](https://github.com/openshift/hypershift/pull/3013)
* [OCPBUGS-19332](https://issues.redhat.com/browse/OCPBUGS-19332): Use impersonated client for fetching the localhost-kubeconfig from ma… [#3011](https://github.com/openshift/hypershift/pull/3011)
* Relax network policy e2e for private [#3020](https://github.com/openshift/hypershift/pull/3020)
* Dump KubeVirt pod logs [#3000](https://github.com/openshift/hypershift/pull/3000)
* Update RHTAP references [#2995](https://github.com/openshift/hypershift/pull/2995)
* [OCPBUGS-19014](https://issues.redhat.com/browse/OCPBUGS-19014): Apply private-router network policy only if running OCP 4.14 [#3012](https://github.com/openshift/hypershift/pull/3012)
* Validate KubeVirt platform required versioning [#2948](https://github.com/openshift/hypershift/pull/2948)
* [OCPBUGS-18720](https://issues.redhat.com/browse/OCPBUGS-18720): amend OLM catalogs ImageStream according to annotation [#3001](https://github.com/openshift/hypershift/pull/3001)
* [OCPBUGS-17906](https://issues.redhat.com/browse/OCPBUGS-17906): reconcile Authentication global config [#3009](https://github.com/openshift/hypershift/pull/3009)
* feat: add _id label to all hypershift operator metrics [#2991](https://github.com/openshift/hypershift/pull/2991)
* [OCPBUGS-18122](https://issues.redhat.com/browse/OCPBUGS-18122): Rename isUpgradeable to isUpgrading according to its return value [#2955](https://github.com/openshift/hypershift/pull/2955)
* [OCPBUGS-18762](https://issues.redhat.com/browse/OCPBUGS-18762): unset ControlPlaneReleaseImage on HCP when ControlPlaneRelease is unset on HC [#3004](https://github.com/openshift/hypershift/pull/3004)
* [OCPBUGS-18754](https://issues.redhat.com/browse/OCPBUGS-18754): tuned DS should not use controlPlaneReleaseImage [#3003](https://github.com/openshift/hypershift/pull/3003)
* [HYPBLD-99](https://issues.redhat.com/browse/HYPBLD-99): enable CGO_ENABLED for building FIPS compliant images [#2997](https://github.com/openshift/hypershift/pull/2997)
* e2e: fixed gomega created from parent test context [#2987](https://github.com/openshift/hypershift/pull/2987)
* bump HO supported version for 4.15 [#2927](https://github.com/openshift/hypershift/pull/2927)
* [HOSTEDCP-1075](https://issues.redhat.com/browse/HOSTEDCP-1075): Document instructions for recovering etcd cluster from lost quorum [#2952](https://github.com/openshift/hypershift/pull/2952)
* [HOSTEDCP-1185](https://issues.redhat.com/browse/HOSTEDCP-1185): Add flag to create a single NAT gateway [#2984](https://github.com/openshift/hypershift/pull/2984)
* Dump kubevirt external infra clusters [#2992](https://github.com/openshift/hypershift/pull/2992)
* [OCPBUGS-18568](https://issues.redhat.com/browse/OCPBUGS-18568): Use MCO and CCO image references when looking up mappings [#2985](https://github.com/openshift/hypershift/pull/2985)
* [HOSTEDCP-591](https://issues.redhat.com/browse/HOSTEDCP-591): Amend OLM catalog IS according to OpenShiftImageRegistryOverrides [#2947](https://github.com/openshift/hypershift/pull/2947)
* e2e: skip CNO pod restart check [#2986](https://github.com/openshift/hypershift/pull/2986)
* [HOSTEDCP-1133](https://issues.redhat.com/browse/HOSTEDCP-1133): Signal NodePool rolling upgrade because of platform changes [#2973](https://github.com/openshift/hypershift/pull/2973)
* [OCPBUGS-18127](https://issues.redhat.com/browse/OCPBUGS-18127): Enable caching of Unstructured Objects in HO [#2988](https://github.com/openshift/hypershift/pull/2988)
* e2e: run Ensure functions after Main part of test [#2983](https://github.com/openshift/hypershift/pull/2983)
* [OCPBUGS-18127](https://issues.redhat.com/browse/OCPBUGS-18127): Ensure machineTemplate name length respects RFC1123 spec [#2975](https://github.com/openshift/hypershift/pull/2975)
* [ACM-6435](https://issues.redhat.com/browse/ACM-6435): add pausedUntil create cluster option in CLI [#2965](https://github.com/openshift/hypershift/pull/2965)
* [OCPBUGS-7840](https://issues.redhat.com/browse/OCPBUGS-7840): Untangle kas port [#2964](https://github.com/openshift/hypershift/pull/2964)
* [OCPBUGS-18399](https://issues.redhat.com/browse/OCPBUGS-18399): Preserve mirror order when serializing ICSP to env [#2977](https://github.com/openshift/hypershift/pull/2977)
* [OCPBUGS-18336](https://issues.redhat.com/browse/OCPBUGS-18336): make konnectivity routes roundrobin [#2971](https://github.com/openshift/hypershift/pull/2971)
* Use the correct pull secret for HCP KubeVirt components [#2919](https://github.com/openshift/hypershift/pull/2919)
* Disable nto inplace test for kubevirt [#2980](https://github.com/openshift/hypershift/pull/2980)
* [OCPBUGS-18438](https://issues.redhat.com/browse/OCPBUGS-18438): Properly format IPv6 address when proxying it through Konnectivity [#2969](https://github.com/openshift/hypershift/pull/2969)
* [OCPBUGS-18127](https://issues.redhat.com/browse/OCPBUGS-18127): Trigger a rolling upgrade on NodePool .spec.platfrom changes [#2956](https://github.com/openshift/hypershift/pull/2956)
* [HOSTEDCP-1156](https://issues.redhat.com/browse/HOSTEDCP-1156): Add defaulting webhook to installation and notes [#2922](https://github.com/openshift/hypershift/pull/2922)
* [HOSTEDCP-979](https://issues.redhat.com/browse/HOSTEDCP-979): Re-enable nodepool in-place upgrade tests [#2960](https://github.com/openshift/hypershift/pull/2960)
* Add a default value (32Gi) for nodepool in `create nodepool kubevirt` command [#2940](https://github.com/openshift/hypershift/pull/2940)
* [OCPBUGS-16221](https://issues.redhat.com/browse/OCPBUGS-16221): Adds trust bundle to ignition-server when configured in HC [#2819](https://github.com/openshift/hypershift/pull/2819)
* Avoid creating tar archive if --archive-dump=false [#2963](https://github.com/openshift/hypershift/pull/2963)
* OCPBUGS-3873 adding rbac for UserOAuthAccessToken [#2962](https://github.com/openshift/hypershift/pull/2962)
* HOSTEDCP-1178 fix limited support label key [#2958](https://github.com/openshift/hypershift/pull/2958)
* [OCPBUGS-18065](https://issues.redhat.com/browse/OCPBUGS-18065): enable aws-pod-identity-webhook on AWS [#2957](https://github.com/openshift/hypershift/pull/2957)
* [OCPBUGS-18308](https://issues.redhat.com/browse/OCPBUGS-18308): Do not use mgmt cluster ICSP to mutate CCO image in KAS pod [#2966](https://github.com/openshift/hypershift/pull/2966)
* [OCPBUGS-18266](https://issues.redhat.com/browse/OCPBUGS-18266): fix Progressing condition when ControlPlaneRelease is set [#2959](https://github.com/openshift/hypershift/pull/2959)
* fix(ho): Restore match label selector behavior [#2951](https://github.com/openshift/hypershift/pull/2951)
* [OCPBUGS-18072](https://issues.redhat.com/browse/OCPBUGS-18072): Set emptyDir storage for the image registry only on initial time for None and Kubevirt platform [#2895](https://github.com/openshift/hypershift/pull/2895)
* [OCPBUGS-18024](https://issues.redhat.com/browse/OCPBUGS-18024): Set Arch to amd64 for HCP NodePool Create [#2941](https://github.com/openshift/hypershift/pull/2941)
* chore(deps): update rhtap references (main) [#2920](https://github.com/openshift/hypershift/pull/2920)
* [OCPBUGS-16813](https://issues.redhat.com/browse/OCPBUGS-16813): switch konnectivity-server to additional container in KAS pods [#2942](https://github.com/openshift/hypershift/pull/2942)
* Updating hostedcluster controller to stop using deprecated flags [#2946](https://github.com/openshift/hypershift/pull/2946)
* [OCPBUGS-17827](https://issues.redhat.com/browse/OCPBUGS-17827): e2e: remove private-router from NeedManagementKASAccessLabel allowlist [#2939](https://github.com/openshift/hypershift/pull/2939)
* [MULTIARCH-3709](https://issues.redhat.com/browse/MULTIARCH-3709): PowerVS - Add reuse resource flags to e2e test [#2902](https://github.com/openshift/hypershift/pull/2902)
* [MULTIARCH-3478](https://issues.redhat.com/browse/MULTIARCH-3478): Minor bug fix on PowerVS infra [#2451](https://github.com/openshift/hypershift/pull/2451)
* [OCPBUGS-18069](https://issues.redhat.com/browse/OCPBUGS-18069): Ensure load balancers are not exist before declaring load balancers are cleaned up [#2887](https://github.com/openshift/hypershift/pull/2887)
* [MULTIARCH-3708](https://issues.redhat.com/browse/MULTIARCH-3708): PowerVS - Fix cluster deletion when existing resources passed [#2867](https://github.com/openshift/hypershift/pull/2867)
* [MGMT-15368](https://issues.redhat.com/browse/MGMT-15368): Document scaling down NodePools [#2944](https://github.com/openshift/hypershift/pull/2944)
* [OCPBUGS-13348](https://issues.redhat.com/browse/OCPBUGS-13348): Hypershift Audit configuration not working. [#2945](https://github.com/openshift/hypershift/pull/2945)
* [TRT-1202](https://issues.redhat.com/browse/TRT-1202): set SkipReleaseImageValidation annotation properly on e2e clusters [#2943](https://github.com/openshift/hypershift/pull/2943)
* [OCPBUGS-17678](https://issues.redhat.com/browse/OCPBUGS-17678): Reconcile cloud credentials configuration to hosted cluster [#2937](https://github.com/openshift/hypershift/pull/2937)
* Add e2e test for etcd member recovery [#2930](https://github.com/openshift/hypershift/pull/2930)
* [OCPBUGS-17827](https://issues.redhat.com/browse/OCPBUGS-17827): remove NeedManagementKASAccessLabel from router pods [#2934](https://github.com/openshift/hypershift/pull/2934)
* [OCPBUGS-17985](https://issues.redhat.com/browse/OCPBUGS-17985): Handle empty mirrorImage result for ignition disconnected registry [#2935](https://github.com/openshift/hypershift/pull/2935)
* [OCPBUGS-17827](https://issues.redhat.com/browse/OCPBUGS-17827): e2e: refactor checkPodsHaveLabel to be allowlist rather than exact match [#2928](https://github.com/openshift/hypershift/pull/2928)
* [OCPBUGS-16813](https://issues.redhat.com/browse/OCPBUGS-16813): do not hardcode ignition-server-proxy replicas [#2933](https://github.com/openshift/hypershift/pull/2933)
* fix(ho): Restore match label selector behavior [#2893](https://github.com/openshift/hypershift/pull/2893)
* [TRT-1202](https://issues.redhat.com/browse/TRT-1202): add annotation to skip release image validation [#2929](https://github.com/openshift/hypershift/pull/2929)
* [OCPBUGS-17812](https://issues.redhat.com/browse/OCPBUGS-17812): Update Etcd health check to mirror standalone etcd [#2918](https://github.com/openshift/hypershift/pull/2918)
* [STOR-1443](https://issues.redhat.com/browse/STOR-1443): Sync `05_operator_role-hypershift.yaml` manifest from cluster-csi-snapsht-controller-operator [#2915](https://github.com/openshift/hypershift/pull/2915)
* [HOSTEDCP-1065](https://issues.redhat.com/browse/HOSTEDCP-1065): CNO deployed hosted-cluster-kubecfg-setup initContainers use CPR image [#2917](https://github.com/openshift/hypershift/pull/2917)
* [HOSTEDCP-1001](https://issues.redhat.com/browse/HOSTEDCP-1001): Image registryOverride included in the image metadata extraction flow [#2909](https://github.com/openshift/hypershift/pull/2909)
* [OCPBUGS-17669](https://issues.redhat.com/browse/OCPBUGS-17669): Validate HostedCluster name against RFC1123 [#2914](https://github.com/openshift/hypershift/pull/2914)
* [HOSTEDCP-1075](https://issues.redhat.com/browse/HOSTEDCP-1075): Document how to recover single etcd member [#2916](https://github.com/openshift/hypershift/pull/2916)
* [HOSTEDCP-1085](https://issues.redhat.com/browse/HOSTEDCP-1085): Create a monitoring dashboard per HostedCluster [#2907](https://github.com/openshift/hypershift/pull/2907)
* chore(deps): update rhtap references (main) [#2903](https://github.com/openshift/hypershift/pull/2903)
* [HOSTEDCP-1063](https://issues.redhat.com/browse/HOSTEDCP-1063): Account for guest webhook URLs without a port [#2898](https://github.com/openshift/hypershift/pull/2898)
* [OCPBUGS-17680](https://issues.redhat.com/browse/OCPBUGS-17680): Remove immutable note from PullSecret [#2910](https://github.com/openshift/hypershift/pull/2910)
* Revert "HOSTEDCP-1001: Image registryOverride included in the image metadata extraction flow" [#2908](https://github.com/openshift/hypershift/pull/2908)
* [OCPBUGS-16076](https://issues.redhat.com/browse/OCPBUGS-16076): Validate HostedCluster name against RFC1123 in CLI [#2906](https://github.com/openshift/hypershift/pull/2906)
* [OCPBUGS-15331](https://issues.redhat.com/browse/OCPBUGS-15331), [OCPBUGS-16049](https://issues.redhat.com/browse/OCPBUGS-16049): Enable AdvertiseAddress dual stack and IPv6 support and added the changes to be included in the certificates [#2779](https://github.com/openshift/hypershift/pull/2779)
* [HOSTEDCP-1081](https://issues.redhat.com/browse/HOSTEDCP-1081): Perform etcd recovery when etcd member data is lost [#2900](https://github.com/openshift/hypershift/pull/2900)
* [SDN-4057](https://issues.redhat.com/browse/SDN-4057): Pass ControlPlane image to OVN [#2896](https://github.com/openshift/hypershift/pull/2896)
* test: e2e: remove SingleReplica etcd chaos test [#2901](https://github.com/openshift/hypershift/pull/2901)
* Allow overriding pod security admission label [#2886](https://github.com/openshift/hypershift/pull/2886)
* [HOSTEDCP-1146](https://issues.redhat.com/browse/HOSTEDCP-1146): cpo: use CPO spec container image if it is a sha256 reference [#2899](https://github.com/openshift/hypershift/pull/2899)
* [HOSTEDCP-1022](https://issues.redhat.com/browse/HOSTEDCP-1022): Set Arch to amd64 [#2897](https://github.com/openshift/hypershift/pull/2897)
* Re-introducing defaulting webhook for self managed HCP [#2892](https://github.com/openshift/hypershift/pull/2892)
* fix-CNV-30260: KubeVirt: fix failed conformance test [#2891](https://github.com/openshift/hypershift/pull/2891)
* [OCPBUGS-16298](https://issues.redhat.com/browse/OCPBUGS-16298): Prevent the kube-apiserver from connecting to the managment kas [#2888](https://github.com/openshift/hypershift/pull/2888)
* [HOSTEDCP-1001](https://issues.redhat.com/browse/HOSTEDCP-1001): Image registryOverride included in the image metadata extraction flow [#2820](https://github.com/openshift/hypershift/pull/2820)
* [HOSTEDCP-1046](https://issues.redhat.com/browse/HOSTEDCP-1046), [HOSTEDCP-1102](https://issues.redhat.com/browse/HOSTEDCP-1102): Follow-on Items [#2847](https://github.com/openshift/hypershift/pull/2847)
* Revert "[HOSTEDCP-1041] Defaulting webhook for self managed HCP" [#2889](https://github.com/openshift/hypershift/pull/2889)
* [OCPBUGS-17446](https://issues.redhat.com/browse/OCPBUGS-17446): Set advertise-address in HCP etcd to resolvable name [#2884](https://github.com/openshift/hypershift/pull/2884)
* Defaulting webhook for self managed HCP [#2864](https://github.com/openshift/hypershift/pull/2864)
* [STOR-1432](https://issues.redhat.com/browse/STOR-1432): cso: add envvars for CSI driver controller images [#2882](https://github.com/openshift/hypershift/pull/2882)
* [HOSTEDCP-1025](https://issues.redhat.com/browse/HOSTEDCP-1025): Add HCP CLI Command to Create a NodePool on AWS [#2852](https://github.com/openshift/hypershift/pull/2852)
* [SDN-4042](https://issues.redhat.com/browse/SDN-4042): Increase upgrade rollout timers [#2881](https://github.com/openshift/hypershift/pull/2881)
* skip olm-collect-profiles in EnsureComponentsHaveNeedManagementKASAccessLabel [#2874](https://github.com/openshift/hypershift/pull/2874)
* [HOSTEDCP-1064](https://issues.redhat.com/browse/HOSTEDCP-1064): Add egress policy for private-router [#2792](https://github.com/openshift/hypershift/pull/2792)
* [HOSTEDCP-1121](https://issues.redhat.com/browse/HOSTEDCP-1121): Ensure SG reconciliation for aws endpoint [#2872](https://github.com/openshift/hypershift/pull/2872)
* chore(deps): update rhtap references [#2865](https://github.com/openshift/hypershift/pull/2865)
* [HOSTEDCP-1065](https://issues.redhat.com/browse/HOSTEDCP-1065): add ControlPlaneImage API for provider-side HCP updates [#2848](https://github.com/openshift/hypershift/pull/2848)
* [HOSTEDCP-1063](https://issues.redhat.com/browse/HOSTEDCP-1063): Disallow webhooks URLs targeting control plane services [#2775](https://github.com/openshift/hypershift/pull/2775)
* [OCPBUGS-17374](https://issues.redhat.com/browse/OCPBUGS-17374): Fast specific dockerignore [#2879](https://github.com/openshift/hypershift/pull/2879)
* Kubevirt how-to docs updates [#2875](https://github.com/openshift/hypershift/pull/2875)
* Fix nodepool upgrade docs link [#2880](https://github.com/openshift/hypershift/pull/2880)
* [OCPBUGS-17171](https://issues.redhat.com/browse/OCPBUGS-17171): Update OLM catalog image tags [#2877](https://github.com/openshift/hypershift/pull/2877)
* [HOSTEDCP-1029](https://issues.redhat.com/browse/HOSTEDCP-1029): Add HCP CLI Command to Destroy a Cluster on AWS [#2853](https://github.com/openshift/hypershift/pull/2853)
* Add workload management annotation to kubevirt-csi daemonset [#2840](https://github.com/openshift/hypershift/pull/2840)
* [WRKLDS-730](https://issues.redhat.com/browse/WRKLDS-730): use default /healthz path for readiness probe in OCM and RCM [#2873](https://github.com/openshift/hypershift/pull/2873)
* Add api and cli validation for kubevirt volume mode [#2862](https://github.com/openshift/hypershift/pull/2862)
* [HOSTEDCP-1079](https://issues.redhat.com/browse/HOSTEDCP-1079): RHTAP HO Containerfile [#2857](https://github.com/openshift/hypershift/pull/2857)
* [OCPBUGS-16770](https://issues.redhat.com/browse/OCPBUGS-16770): add need-management-kas-access label to olm-collect-profiles pods [#2854](https://github.com/openshift/hypershift/pull/2854)
* [MULTIARCH-3684](https://issues.redhat.com/browse/MULTIARCH-3684): PowerVS - Upgrade capi to use v1beta2 APIs [#2831](https://github.com/openshift/hypershift/pull/2831)
* [HOSTEDCP-1046](https://issues.redhat.com/browse/HOSTEDCP-1046): Add ImageDigestMirrorSet to Config API comment [#2868](https://github.com/openshift/hypershift/pull/2868)
* [MULTIARCH-3683](https://issues.redhat.com/browse/MULTIARCH-3683): Add dev flags in destroy cluster powervs command [#2764](https://github.com/openshift/hypershift/pull/2764)
* kubevirt: Reconcile EgressFirewall only for ovn-k [#2849](https://github.com/openshift/hypershift/pull/2849)
* [HOSTEDCP-1046](https://issues.redhat.com/browse/HOSTEDCP-1046): Add IDMS to the list of valid config manifests [#2837](https://github.com/openshift/hypershift/pull/2837)
* [OCPBUGS-17059](https://issues.redhat.com/browse/OCPBUGS-17059): Add volume mode to kubevirt root volume api [#2860](https://github.com/openshift/hypershift/pull/2860)
* Update RHTAP references (main) [#2832](https://github.com/openshift/hypershift/pull/2832)
* [OCPBUGS-16809](https://issues.redhat.com/browse/OCPBUGS-16809): Configured IgnitionProxy to support IPv4 and IPv6 [#2850](https://github.com/openshift/hypershift/pull/2850)
* [OCPBUGS-14163](https://issues.redhat.com/browse/OCPBUGS-14163): Fixed ETCD to work in Ipv6 and Dual stack envs [#2846](https://github.com/openshift/hypershift/pull/2846)
* [Full changelog](https://github.com/openshift/hypershift/compare/bb04b0a79621406a3c0b7522e50ee51cce70f85f...696f8d536c3e55e354f56c71742f532d3601220b)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/f8916d98f2e55a03c73e6664782a9df04830f41a)

* [OCPBUGS-19188](https://issues.redhat.com/browse/OCPBUGS-19188): Updating ose-ibm-vpc-block-csi-driver images to be consistent with ART [#44](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/44)
* [OCPBUGS-16783](https://issues.redhat.com/browse/OCPBUGS-16783): Chore: Update OWNERS and OWNERS_ALIASES [#41](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/41)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/e403962dd24c7ae99bdb3befc0f0f7fca75385c3...f8916d98f2e55a03c73e6664782a9df04830f41a)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/c9d884594a5b59fb232674167f32b05a405f9ec5)

* [OCPBUGS-19215](https://issues.redhat.com/browse/OCPBUGS-19215): Updating ose-ibm-vpc-block-csi-driver-operator images to be consistent with ART [#78](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/78)
* [OCPBUGS-18105](https://issues.redhat.com/browse/OCPBUGS-18105): [IBM VPC] failed provisioning volume in proxy cluster [#74](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/74)
* [OCPBUGS-16654](https://issues.redhat.com/browse/OCPBUGS-16654): Revert revert "STOR-1065: Rename node-driver-registrar… [#69](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/69)
* [OCPBUGS-16571](https://issues.redhat.com/browse/OCPBUGS-16571): Bump library-go to remove dependency on goproxy [#71](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/71)
* [OCPBUGS-16783](https://issues.redhat.com/browse/OCPBUGS-16783): Chore: Update OWNERS [#70](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/70)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/a13ef93d7cbb7a4c2deea3a7335df1545eb0b160...c9d884594a5b59fb232674167f32b05a405f9ec5)


### [ibm-vpc-node-label-updater](https://github.com/openshift/ibm-vpc-node-label-updater/tree/8e7b5782c1e5d7ba88b8452cad58bb73a963a9fe)

* [OCPBUGS-19217](https://issues.redhat.com/browse/OCPBUGS-19217): Updating ibm-vpc-node-label-updater images to be consistent with ART [#25](https://github.com/openshift/ibm-vpc-node-label-updater/pull/25)
* [Full changelog](https://github.com/openshift/ibm-vpc-node-label-updater/compare/623de156aa396655a34c8a0df644a3c0ce982726...8e7b5782c1e5d7ba88b8452cad58bb73a963a9fe)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/b568973d77843f16fc889827548731ef07b1d558)

* [OCPBUGS-19221](https://issues.redhat.com/browse/OCPBUGS-19221): Updating ose-ibmcloud-machine-controllers images to be consistent with ART [#24](https://github.com/openshift/machine-api-provider-ibmcloud/pull/24)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/c28b2232ab1c0dcd951a23b324506eaab510389c...b568973d77843f16fc889827548731ef07b1d558)


### [insights-operator](https://github.com/openshift/insights-operator/tree/8ca514dcdbb9face448e93549f09270e6d002a35)

* [OCPBUGS-19476](https://issues.redhat.com/browse/OCPBUGS-19476): update Insights report config logging (#824) [#824](https://github.com/openshift/insights-operator/pull/824)
* Updating ose-insights-operator images to be consistent with ART (#821) [#821](https://github.com/openshift/insights-operator/pull/821)
* [OCPBUGS-19387](https://issues.redhat.com/browse/OCPBUGS-19387): mark datagather job as failed if the data was not processed (#822) [#822](https://github.com/openshift/insights-operator/pull/822)
* Minor fixes for the techpreview (#820) [#820](https://github.com/openshift/insights-operator/pull/820)
* update changelog (#819) [#819](https://github.com/openshift/insights-operator/pull/819)
* [OCPBUGS-18002](https://issues.redhat.com/browse/OCPBUGS-18002): DVO metrics gatherer - use UIDs only when DVO deployed in 'openshift-deployment-validation-operator' namespace (#818) [#818](https://github.com/openshift/insights-operator/pull/818)
* Improve ConfigMaps gatherer docs (#817) [#817](https://github.com/openshift/insights-operator/pull/817)
* [OCPBUGS-17428](https://issues.redhat.com/browse/OCPBUGS-17428): workload info gatherer, add external image repo (#811) [#811](https://github.com/openshift/insights-operator/pull/811)
* on-demand data gathering (#815) [#815](https://github.com/openshift/insights-operator/pull/815)
* download Insights analysis report from a new endpoint (using Insights request ID) (#812) [#812](https://github.com/openshift/insights-operator/pull/812)
* [OCPBUGS-16576](https://issues.redhat.com/browse/OCPBUGS-16576): bump library-go version (#814) [#814](https://github.com/openshift/insights-operator/pull/814)
* add unit test for the InsightsDataGather Observer (#813) [#813](https://github.com/openshift/insights-operator/pull/813)
* check new processing status endpoint after uploading data in the job (#810) [#810](https://github.com/openshift/insights-operator/pull/810)
* [OCPBUGS-16017](https://issues.redhat.com/browse/OCPBUGS-16017): update DataGather CR status in case of job failure (#809) [#809](https://github.com/openshift/insights-operator/pull/809)
* [Full changelog](https://github.com/openshift/insights-operator/compare/352c9347274fa9cd84ad11e2d279a69cecc74b81...8ca514dcdbb9face448e93549f09270e6d002a35)


### [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter/tree/d217980fb14332b986e8b35247463aafd9c81199)

* [OCPBUGS-19251](https://issues.redhat.com/browse/OCPBUGS-19251): Updating ose-prometheus-adapter images to be consistent with ART [#74](https://github.com/openshift/k8s-prometheus-adapter/pull/74)
* Bump openshift/k8s-prometheus-adapter to v0.11.0 [#72](https://github.com/openshift/k8s-prometheus-adapter/pull/72)
* [Full changelog](https://github.com/openshift/k8s-prometheus-adapter/compare/2f59cfdf94f6f284b0a77cf78af6cea849572fb2...d217980fb14332b986e8b35247463aafd9c81199)


### [keepalived-ipfailover](https://github.com/openshift/images/tree/16dbf5ee78a8e007a17c53568a0655f7e10ec794)

* [OCPBUGS-19239](https://issues.redhat.com/browse/OCPBUGS-19239): Updating openshift-enterprise-egress-router images to be consistent with ART [#151](https://github.com/openshift/images/pull/151)
* [OCPBUGS-18860](https://issues.redhat.com/browse/OCPBUGS-18860): Updating openshift-enterprise-base-rhel9 images to be consistent with ART [#149](https://github.com/openshift/images/pull/149)
* [OCPBUGS-18853](https://issues.redhat.com/browse/OCPBUGS-18853): Updating openshift-enterprise-base images to be consistent with ART [#148](https://github.com/openshift/images/pull/148)
* [OCPBUGS-10176](https://issues.redhat.com/browse/OCPBUGS-10176): 15143307: Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART [#132](https://github.com/openshift/images/pull/132)
* [OCPBUGS-10163](https://issues.redhat.com/browse/OCPBUGS-10163): Updating openshift-enterprise-egress-router images to be consistent with ART [#131](https://github.com/openshift/images/pull/131)
* [OCPBUGS-10181](https://issues.redhat.com/browse/OCPBUGS-10181): 15143312: Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART [#133](https://github.com/openshift/images/pull/133)
* [Full changelog](https://github.com/openshift/images/compare/babc8a2583194e57b94210118336416a57dc93d8...16dbf5ee78a8e007a17c53568a0655f7e10ec794)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/2dfa2a974418e122d9c7630b73bbb102652594bb)

* Collect pod operation latency metrics properly [#576](https://github.com/openshift/sdn/pull/576)
* Live migration: Add flows that allow openshift-sdn to connect to ovnkube [#569](https://github.com/openshift/sdn/pull/569)
* [OCPBUGS-17316](https://issues.redhat.com/browse/OCPBUGS-17316): CVE-2023-3978: golang.org/x/net/html: Cross site scripting [#571](https://github.com/openshift/sdn/pull/571)
* [OCPBUGS-16790](https://issues.redhat.com/browse/OCPBUGS-16790): Change the permission of 80-openshift-network.conf to 600 [#570](https://github.com/openshift/sdn/pull/570)
* [Full changelog](https://github.com/openshift/sdn/compare/86add1ecc09d84cdd0475806d13bca1b69a415e3...2dfa2a974418e122d9c7630b73bbb102652594bb)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/48568abdaaf4088aef46a3caba158280801c7b93)

* [OCPBUGS-19256](https://issues.redhat.com/browse/OCPBUGS-19256): Updating kube-state-metrics images to be consistent with ART [#97](https://github.com/openshift/kube-state-metrics/pull/97)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/d13d44fdb41fbdfae555e791982f040f29003e3e...48568abdaaf4088aef46a3caba158280801c7b93)


### [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt/tree/e465e606e7d17c64392cdeba099f9382580e44b0)

* [OCPBUGS-19193](https://issues.redhat.com/browse/OCPBUGS-19193): Updating ose-kubevirt-cloud-controller-manager images to be consistent with ART [#25](https://github.com/openshift/cloud-provider-kubevirt/pull/25)
* Auto sync upstream 2023 09 15 20 36 [#24](https://github.com/openshift/cloud-provider-kubevirt/pull/24)
* [Full changelog](https://github.com/openshift/cloud-provider-kubevirt/compare/9ab93bad0ca56f6cd01564888fb1e4ac1c17b434...e465e606e7d17c64392cdeba099f9382580e44b0)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/aea7be8e2213a74d1945d39eba4d1efec0369c36)

* [OCPBUGS-19115](https://issues.redhat.com/browse/OCPBUGS-19115): Updating ose-kubevirt-csi-driver-rhel8 images to be consistent with ART [#23](https://github.com/openshift/kubevirt-csi-driver/pull/23)
* Ensure volume is removed before returning success (#90) [#22](https://github.com/openshift/kubevirt-csi-driver/pull/22)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/1255735fc177ba34546e755f632e585d76f86e06...aea7be8e2213a74d1945d39eba4d1efec0369c36)


### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/5d77bc88f116bd43e7134a9a42bf6e719256dca0)

* client/domain: Remove spice as domain grahics [#260](https://github.com/openshift/cluster-api-provider-libvirt/pull/260)
* [OCPBUGS-19187](https://issues.redhat.com/browse/OCPBUGS-19187): Updating ose-libvirt-machine-controllers images to be consistent with ART [#262](https://github.com/openshift/cluster-api-provider-libvirt/pull/262)
* [OCPBUGS-18338](https://issues.redhat.com/browse/OCPBUGS-18338): Fix CI by running tests natively by default [#261](https://github.com/openshift/cluster-api-provider-libvirt/pull/261)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/c2f9fbfaa20de4290400754049cd4c7c8e6866fd...5d77bc88f116bd43e7134a9a42bf6e719256dca0)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/c11d6227cb4640ce979edd4e9469342274e88910)

* [MGMT-13425](https://issues.redhat.com/browse/MGMT-13425): Don't fail when workers not needed [#1165](https://github.com/openshift/machine-api-operator/pull/1165)
* [SPLAT-1172](https://issues.redhat.com/browse/SPLAT-1172): Enhance machine status relating to IPAddressClaimed [#1166](https://github.com/openshift/machine-api-operator/pull/1166)
* [OCPBUGS-19241](https://issues.redhat.com/browse/OCPBUGS-19241): Updating ose-machine-api-operator images to be consistent with ART [#1167](https://github.com/openshift/machine-api-operator/pull/1167)
* [OCPBUGS-17872](https://issues.redhat.com/browse/OCPBUGS-17872): Azure MAO CredentialsRequest contains unnecessary network write permissions [#1161](https://github.com/openshift/machine-api-operator/pull/1161)
* [OCPBUGS-17090](https://issues.redhat.com/browse/OCPBUGS-17090): Set logger for controller runtime [#1164](https://github.com/openshift/machine-api-operator/pull/1164)
* [OCPBUGS-18338](https://issues.redhat.com/browse/OCPBUGS-18338): Fix CI by running tests natively by default [#1163](https://github.com/openshift/machine-api-operator/pull/1163)
* [OCPBUGS-17919](https://issues.redhat.com/browse/OCPBUGS-17919): [Azure] MAO Missing DiskEncryptionSet read permissions [#1162](https://github.com/openshift/machine-api-operator/pull/1162)
* [OCPCLOUD-2014](https://issues.redhat.com/browse/OCPCLOUD-2014): Switch Azure credentials request to use explicit permissions [#1152](https://github.com/openshift/machine-api-operator/pull/1152)
* [OCPBUGS-16925](https://issues.redhat.com/browse/OCPBUGS-16925): only attempt to remove finalizers if staticIPFeatureGateEnabled [#1160](https://github.com/openshift/machine-api-operator/pull/1160)
* install/0000_99_machine-api-operator_00_tombstones: Drop obsolete file [#1159](https://github.com/openshift/machine-api-operator/pull/1159)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/7e23c54e1aff1ceee8df91bd7f590d153ccfac4c...c11d6227cb4640ce979edd4e9469342274e88910)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/ff7ef2ec8ddbdf4f5758ee8f3ba3fea2d364e581)

* [OCPBUGS-18772](https://issues.redhat.com/browse/OCPBUGS-18772): Use image exists in resolv-prepender instead of wc -l [#3910](https://github.com/openshift/machine-config-operator/pull/3910)
* [MCO-707](https://issues.redhat.com/browse/MCO-707): Strip registry transport from os image URL for comparison [#3857](https://github.com/openshift/machine-config-operator/pull/3857)
* [OCPBUGS-15583](https://issues.redhat.com/browse/OCPBUGS-15583): Revert "Revert "fix nodeStatusUpdateFrequency"" [#3890](https://github.com/openshift/machine-config-operator/pull/3890)
* [OCPBUGS-17811](https://issues.redhat.com/browse/OCPBUGS-17811): add certificate input to bootstrap mcs [#3876](https://github.com/openshift/machine-config-operator/pull/3876)
* [MCO-746](https://issues.redhat.com/browse/MCO-746): make buildcontroller tests less flaky [#3905](https://github.com/openshift/machine-config-operator/pull/3905)
* [OCPBUGS-18902](https://issues.redhat.com/browse/OCPBUGS-18902): Internal Registry Secrets merge causing excessive API calls [#3912](https://github.com/openshift/machine-config-operator/pull/3912)
* [MCO-664](https://issues.redhat.com/browse/MCO-664): adds e2e for on-cluster build dev preview [#3807](https://github.com/openshift/machine-config-operator/pull/3807)
* Dockerfile: update local copy to OCP 4.15 image [#3922](https://github.com/openshift/machine-config-operator/pull/3922)
* [OCPBUGS-19365](https://issues.redhat.com/browse/OCPBUGS-19365): Ignore invoking nbctl calls if its SDN [#3926](https://github.com/openshift/machine-config-operator/pull/3926)
* [OCPBUGS-15910](https://issues.redhat.com/browse/OCPBUGS-15910): After dual-stack conversion reconcile IPFamilies [#3909](https://github.com/openshift/machine-config-operator/pull/3909)
* [OCPBUGS-18800](https://issues.redhat.com/browse/OCPBUGS-18800): fix merged image registry CA behavior [#3851](https://github.com/openshift/machine-config-operator/pull/3851)
* mod: Update rpmostree-client-go [#3916](https://github.com/openshift/machine-config-operator/pull/3916)
* [OCPBUGS-13044](https://issues.redhat.com/browse/OCPBUGS-13044): daemon: always use `podman cp` to copy extensions container content [#3921](https://github.com/openshift/machine-config-operator/pull/3921)
* [OCPBUGS-18906](https://issues.redhat.com/browse/OCPBUGS-18906): Remove dependency on k8s.io/kubernetes packages [#3913](https://github.com/openshift/machine-config-operator/pull/3913)
* [OCPBUGS-19097](https://issues.redhat.com/browse/OCPBUGS-19097): Updating openshift-proxy-pull-test images to be consistent with ART [#3918](https://github.com/openshift/machine-config-operator/pull/3918)
* [OCPBUGS-18772](https://issues.redhat.com/browse/OCPBUGS-18772): resolv-prepender: avoid pulling baremetalRuntimeCfgImage again [#3907](https://github.com/openshift/machine-config-operator/pull/3907)
* [OCPBUGS-19179](https://issues.redhat.com/browse/OCPBUGS-19179): Updating ose-machine-config-operator images to be consistent with ART [#3919](https://github.com/openshift/machine-config-operator/pull/3919)
* [OCPBUGS-16905](https://issues.redhat.com/browse/OCPBUGS-16905): install: Recreate and delayed default ServiceAccount deletion [#3895](https://github.com/openshift/machine-config-operator/pull/3895)
* [MCO-765](https://issues.redhat.com/browse/MCO-765): Examine/Remove memory limits on MCO pods [#3915](https://github.com/openshift/machine-config-operator/pull/3915)
* [MCO-731](https://issues.redhat.com/browse/MCO-731): Move services machine-config-daemon-pull.service and machine-config-daemon-firstboot.service before ovs-configuration.service [#3858](https://github.com/openshift/machine-config-operator/pull/3858)
* [MCO-708](https://issues.redhat.com/browse/MCO-708): Extract and merge kernel arguments from /proc/cmdline [#3856](https://github.com/openshift/machine-config-operator/pull/3856)
* configure-ovs-network: Add tun device support [#3618](https://github.com/openshift/machine-config-operator/pull/3618)
* [OCPBUGS-11437](https://issues.redhat.com/browse/OCPBUGS-11437): MCO keeps the pull secret to .orig file once it replaced [#3759](https://github.com/openshift/machine-config-operator/pull/3759)
* [OCPBUGS-9972](https://issues.redhat.com/browse/OCPBUGS-9972): Fix azure routes hack for ovnk pods towards internalLB on master nodes in SGW mode [#3878](https://github.com/openshift/machine-config-operator/pull/3878)
* [OCPBUGS-18442](https://issues.redhat.com/browse/OCPBUGS-18442): MCO is degraded if not install image registry operator [#3901](https://github.com/openshift/machine-config-operator/pull/3901)
* [OCPBUGS-18097](https://issues.redhat.com/browse/OCPBUGS-18097): ensure cconfig is not updated too frequently [#3891](https://github.com/openshift/machine-config-operator/pull/3891)
* [OCPBUGS-18086](https://issues.redhat.com/browse/OCPBUGS-18086): Quiet controller noisiness [#3886](https://github.com/openshift/machine-config-operator/pull/3886)
* [OCPBUGS-16035](https://issues.redhat.com/browse/OCPBUGS-16035): daemon: create /etc/systemd/network directory on node [#3883](https://github.com/openshift/machine-config-operator/pull/3883)
* Revert "fix nodeStatusUpdateFrequency" [#3887](https://github.com/openshift/machine-config-operator/pull/3887)
* [OCPBUGS-17787](https://issues.redhat.com/browse/OCPBUGS-17787): Fix sysctl breaking dots in paths [#3870](https://github.com/openshift/machine-config-operator/pull/3870)
* [OCPBUGS-16733](https://issues.redhat.com/browse/OCPBUGS-16733): on-prem: run resolv-prepender on NM reapply event [#3827](https://github.com/openshift/machine-config-operator/pull/3827)
* [OCPBUGS-15583](https://issues.redhat.com/browse/OCPBUGS-15583): fix nodeStatusUpdateFrequency [#3784](https://github.com/openshift/machine-config-operator/pull/3784)
* [OCPBUGS-17810](https://issues.redhat.com/browse/OCPBUGS-17810): temporarily remove cert observability fields, add storageversionmigration for machineconfigpools,controllerconfig [#3866](https://github.com/openshift/machine-config-operator/pull/3866)
* [OCPBUGS-11832](https://issues.redhat.com/browse/OCPBUGS-11832): SSHkeys fails to write on upgrade to 4.13.rc3 [#3810](https://github.com/openshift/machine-config-operator/pull/3810)
* [MCO-564](https://issues.redhat.com/browse/MCO-564): Make MCD aware of on-cluster builds [#3848](https://github.com/openshift/machine-config-operator/pull/3848)
* MCO 566: MCO 662 Wire up productionalized BuildController in Machine OS Builder binary and choosing backend image builder [#3861](https://github.com/openshift/machine-config-operator/pull/3861)
* [MCO-605](https://issues.redhat.com/browse/MCO-605): MCO-550: Remove Certificates from MachineConfig [#3787](https://github.com/openshift/machine-config-operator/pull/3787)
* [MCO-573](https://issues.redhat.com/browse/MCO-573): Wire up security/trust/pull secrets between rpm-ostree and internal registry [#3806](https://github.com/openshift/machine-config-operator/pull/3806)
* [OCPBUGS-17701](https://issues.redhat.com/browse/OCPBUGS-17701): daemon: igmore mounting MCD pod content when target is "/" [#3860](https://github.com/openshift/machine-config-operator/pull/3860)
* mcs: Use certwatcher [#3744](https://github.com/openshift/machine-config-operator/pull/3744)
* [MCO-729](https://issues.redhat.com/browse/MCO-729): BuildController should allow cluster admins to provide a custom Dockerfile [#3847](https://github.com/openshift/machine-config-operator/pull/3847)
* [MCO-564](https://issues.redhat.com/browse/MCO-564): Make NodeController aware of BuildController [#3817](https://github.com/openshift/machine-config-operator/pull/3817)
* [OCPBUGS-17568](https://issues.redhat.com/browse/OCPBUGS-17568): Agent-based install process the container machine-config-controller will be oom [#3862](https://github.com/openshift/machine-config-operator/pull/3862)
* [OPNET-343](https://issues.redhat.com/browse/OPNET-343): Restore node-ip for kubelet in dual-stack vSphere [#3859](https://github.com/openshift/machine-config-operator/pull/3859)
* OCPBUGS-17683 replace .. with : on registry CA file paths [#3854](https://github.com/openshift/machine-config-operator/pull/3854)
* operator: remove metrics related log [#3855](https://github.com/openshift/machine-config-operator/pull/3855)
* [MCO-565](https://issues.redhat.com/browse/MCO-565): MCO-568: MCO-659: MCO-660 On-cluster build opt-in function, building machine-os-builder stub, RBAC and service acct inclusions. Deletes deployment rather than scale down to 0 without label [#3834](https://github.com/openshift/machine-config-operator/pull/3834)
* [MCO-588](https://issues.redhat.com/browse/MCO-588): Update ignition spec to 3.4, disallow ignition KernelArguments for now [#3814](https://github.com/openshift/machine-config-operator/pull/3814)
* [OCPBUGS-17433](https://issues.redhat.com/browse/OCPBUGS-17433): Sync featuregate controller during the node config controller sync [#3846](https://github.com/openshift/machine-config-operator/pull/3846)
* [OCPBUGS-8938](https://issues.redhat.com/browse/OCPBUGS-8938): OCPBUGS-15202: MCO-555: kube-rbac-proxy addition [#3663](https://github.com/openshift/machine-config-operator/pull/3663)
* [MCO-654](https://issues.redhat.com/browse/MCO-654): forcefile should always trigger an OS update [#3790](https://github.com/openshift/machine-config-operator/pull/3790)
* [OCPBUGS-14945](https://issues.redhat.com/browse/OCPBUGS-14945): add HostToContainer propagation to all hostPath volume mounts [#3792](https://github.com/openshift/machine-config-operator/pull/3792)
* [MCO-532](https://issues.redhat.com/browse/MCO-532): Finish lease type migration [#3842](https://github.com/openshift/machine-config-operator/pull/3842)
* [OCPBUGS-13825](https://issues.redhat.com/browse/OCPBUGS-13825): The machine-config-controller pod restart in SNO+1 causing daemonsets to restart [#3838](https://github.com/openshift/machine-config-operator/pull/3838)
* [OCPBUGS-14965](https://issues.redhat.com/browse/OCPBUGS-14965): Run hostnamectl with systemd-run [#3746](https://github.com/openshift/machine-config-operator/pull/3746)
* install: Fix dash-to-hyhen for 04_kube_rbac_proxy_config.yaml prefix [#3837](https://github.com/openshift/machine-config-operator/pull/3837)
* [OCPNODE-1714](https://issues.redhat.com/browse/OCPNODE-1714): files: add skip_mount_home to storage.conf [#3777](https://github.com/openshift/machine-config-operator/pull/3777)
* [OCPBUGS-16227](https://issues.redhat.com/browse/OCPBUGS-16227): make sure sshKey are not emptied out on firstboot [#3829](https://github.com/openshift/machine-config-operator/pull/3829)
* daemon: Two minor fixes for reexec [#3835](https://github.com/openshift/machine-config-operator/pull/3835)
* daemon: Remove even more dead legacy OS update code [#3820](https://github.com/openshift/machine-config-operator/pull/3820)
* [MCO-552](https://issues.redhat.com/browse/MCO-552): implement the ability for the MCO to handle image registry certificates [#3770](https://github.com/openshift/machine-config-operator/pull/3770)
* [OCPBUGS-17156](https://issues.redhat.com/browse/OCPBUGS-17156): daemon: Always replace binary [#3832](https://github.com/openshift/machine-config-operator/pull/3832)
* Revert "daemon: Make binary writing idempotent" [#3831](https://github.com/openshift/machine-config-operator/pull/3831)
* [OCPBUGS-16921](https://issues.redhat.com/browse/OCPBUGS-16921): daemon: Make binary writing idempotent [#3825](https://github.com/openshift/machine-config-operator/pull/3825)
* Revert "MCO-565: MCO-568: MCO-659: MCO-660 On-cluster build opt-in function, building machine-os-builder stub, RBAC and service acct inclusions" [#3830](https://github.com/openshift/machine-config-operator/pull/3830)
* Revert " add Passwd to bootstrap served ignition" [#3828](https://github.com/openshift/machine-config-operator/pull/3828)
* [OCPBUGS-15367](https://issues.redhat.com/browse/OCPBUGS-15367): The kubeconfig copied on to each node has 644 permissions [#3808](https://github.com/openshift/machine-config-operator/pull/3808)
* [MCO-597](https://issues.redhat.com/browse/MCO-597): Remove the MCO's dependency on journal reads [#3822](https://github.com/openshift/machine-config-operator/pull/3822)
* fix certExpiry description [#3823](https://github.com/openshift/machine-config-operator/pull/3823)
* [OCPBUGS-16227](https://issues.redhat.com/browse/OCPBUGS-16227): add Passwd to bootstrap served ignition [#3811](https://github.com/openshift/machine-config-operator/pull/3811)
* [MCO-565](https://issues.redhat.com/browse/MCO-565): MCO-568: MCO-659: MCO-660 On-cluster build opt-in function, building machine-os-builder stub, RBAC and service acct inclusions [#3763](https://github.com/openshift/machine-config-operator/pull/3763)
* [OCPNODE-1717](https://issues.redhat.com/browse/OCPNODE-1717): Make cgroupsv2 default in OCP-4.14 [#3789](https://github.com/openshift/machine-config-operator/pull/3789)
* [OCPNODE-1655](https://issues.redhat.com/browse/OCPNODE-1655): Apply node-cluster dashboard as a config map [#3708](https://github.com/openshift/machine-config-operator/pull/3708)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/3fb306d53f555ab6125d82cc790833f8a7bffa30...ff7ef2ec8ddbdf4f5758ee8f3ba3fea2d364e581)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/83b02530748019656644047d0c37dabee82dbb06)

* [OU-179](https://issues.redhat.com/browse/OU-179): Fix the root cause of externalLabels not present on alerts [#53](https://github.com/openshift/monitoring-plugin/pull/53)
* Revert "Fix i18n namespace for navigation menu entries" [#77](https://github.com/openshift/monitoring-plugin/pull/77)
* Fix i18n namespace for navigation menu entries [#73](https://github.com/openshift/monitoring-plugin/pull/73)
* add ipv6 nginx configuration [#76](https://github.com/openshift/monitoring-plugin/pull/76)
* [OCPBUGS-19233](https://issues.redhat.com/browse/OCPBUGS-19233): Updating monitoring-plugin images to be consistent with ART [#75](https://github.com/openshift/monitoring-plugin/pull/75)
* [OCPBUGS-7184](https://issues.redhat.com/browse/OCPBUGS-7184): Fix bug where the variable dropdown options were not updated [#69](https://github.com/openshift/monitoring-plugin/pull/69)
* [OCPBUGS-17650](https://issues.redhat.com/browse/OCPBUGS-17650): Fix /monitoring/ redirects [#68](https://github.com/openshift/monitoring-plugin/pull/68)
* [OCPBUGS-15323](https://issues.redhat.com/browse/OCPBUGS-15323): Use datasource defined in dashboard definition broken by switch to web console monitoring plugin [#65](https://github.com/openshift/monitoring-plugin/pull/65)
* [OU-230](https://issues.redhat.com/browse/OU-230): Remove checkboxes from the Silenced By list on alert details page [#67](https://github.com/openshift/monitoring-plugin/pull/67)
* [OU-191](https://issues.redhat.com/browse/OU-191): Fix width of dashboards tables to use full panel width [#66](https://github.com/openshift/monitoring-plugin/pull/66)
* Change i18n namespace to `plugin__monitoring-plugin` [#63](https://github.com/openshift/monitoring-plugin/pull/63)
* Fix missing `key` error caused by list page filters [#64](https://github.com/openshift/monitoring-plugin/pull/64)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/c45a272354b44840544505783575f39ebb5ac55f...83b02530748019656644047d0c37dabee82dbb06)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/5e7b7b2448c2304487f769bd5caf809c7ed02dbc)

* [OCPBUGS-19094](https://issues.redhat.com/browse/OCPBUGS-19094): Updating ose-multus-admission-controller images to be consistent with ART [#69](https://github.com/openshift/multus-admission-controller/pull/69)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/1a9985bd714c8a8be934082945ec76f083feeba4...5e7b7b2448c2304487f769bd5caf809c7ed02dbc)


### [multus-cni](https://github.com/openshift/multus-cni/tree/16f601c94ad3abf678bfa66cf0515719a540a4f6)

* [OCPBUGS-18995](https://issues.redhat.com/browse/OCPBUGS-18995): Move chroot from multus main process to its child processes (#1161) [#186](https://github.com/openshift/multus-cni/pull/186)
* [OCPBUGS-19364](https://issues.redhat.com/browse/OCPBUGS-19364): Updating multus-cni images to be consistent with ART [#183](https://github.com/openshift/multus-cni/pull/183)
* Per node cert [#184](https://github.com/openshift/multus-cni/pull/184)
* [OCPBUGS-18307](https://issues.redhat.com/browse/OCPBUGS-18307): Performance and efficiency improvements in daemon/server mode [#180](https://github.com/openshift/multus-cni/pull/180)
* Use container base image's /etc/os-release to copy multus binary [#179](https://github.com/openshift/multus-cni/pull/179)
* Change /usr/src/multus-cni/bin to rhel8 based one [#178](https://github.com/openshift/multus-cni/pull/178)
* Cherry pick upstream fix [#177](https://github.com/openshift/multus-cni/pull/177)
* Upstream sync 202308 [#176](https://github.com/openshift/multus-cni/pull/176)
* [Full changelog](https://github.com/openshift/multus-cni/compare/484de538fdf1ca991a6234243bf9326685f721df...16f601c94ad3abf678bfa66cf0515719a540a4f6)


### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/176e9983ae9d8980dee7886f83271b7bef268376)

* Updating multus-networkpolicy images to be consistent with ART (#31) [#31](https://github.com/openshift/multus-networkpolicy/pull/31)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/0d76ba791dc3432c51c9a9fa6b95e41034af7988...176e9983ae9d8980dee7886f83271b7bef268376)


### [multus-route-override-cni](https://github.com/openshift/route-override-cni/tree/a5b755b513f39e6e06ae3eca8daa6f965e96e6c5)

* [OCPBUGS-18848](https://issues.redhat.com/browse/OCPBUGS-18848): Updating ose-multus-route-override-cni images to be consistent with ART [#48](https://github.com/openshift/route-override-cni/pull/48)
* 15393552: Updating ose-multus-route-override-cni images to be consistent with ART [#47](https://github.com/openshift/route-override-cni/pull/47)
* 15393552: Updating ose-multus-route-override-cni images to be consistent with ART [#45](https://github.com/openshift/route-override-cni/pull/45)
* Revert ART changes to fix rhel9 base binary [#44](https://github.com/openshift/route-override-cni/pull/44)
* [Full changelog](https://github.com/openshift/route-override-cni/compare/e0bcb1af5cb56757d5eb8f36c9dc204033e65201...a5b755b513f39e6e06ae3eca8daa6f965e96e6c5)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/7478bebe4c037fda4c1a95a42009fca36b730e30)

* [OCPBUGS-18893](https://issues.redhat.com/browse/OCPBUGS-18893): Rechecking pending Pods (conflict resolved) [#196](https://github.com/openshift/whereabouts-cni/pull/196)
* [OCPBUGS-18847](https://issues.redhat.com/browse/OCPBUGS-18847): Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART [#192](https://github.com/openshift/whereabouts-cni/pull/192)
* [Bug 16002](https://bugzilla.redhat.com/show_bug.cgi?id=16002): Change default binary to RHEL8 image [#172](https://github.com/openshift/whereabouts-cni/pull/172)
* [OCPBUGS-15905](https://issues.redhat.com/browse/OCPBUGS-15905): Denormalize IP name before checking if pod is alive [Backport 4.14] [#167](https://github.com/openshift/whereabouts-cni/pull/167)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/2fc9d9eb55a6a093a5f3c99153e7706eeb89a822...7478bebe4c037fda4c1a95a42009fca36b730e30)


### [must-gather](https://github.com/openshift/must-gather/tree/197b7c6051deca66c76ecddc69c6b726d0d0f092)

* Use oc get daemonset to identify the NTO image [#378](https://github.com/openshift/must-gather/pull/378)
* [OCPBUGS-17907](https://issues.redhat.com/browse/OCPBUGS-17907): Revert "Added gathering script for SNOs with workload partitioning" [#376](https://github.com/openshift/must-gather/pull/376)
* Split gather_network_logs into basics and extras [#375](https://github.com/openshift/must-gather/pull/375)
* Added gathering script for SNOs with workload partitioning [#373](https://github.com/openshift/must-gather/pull/373)
* Add csi-proxy logs collection in must-gather for Windows nodes [#374](https://github.com/openshift/must-gather/pull/374)
* [SDN-3687](https://issues.redhat.com/browse/SDN-3687): Support gathering DBs for OVNK-Interconnect mode [#370](https://github.com/openshift/must-gather/pull/370)
* [Full changelog](https://github.com/openshift/must-gather/compare/5f0e1575b6d31010b9f0cf3695b02a1546bfbd9e...197b7c6051deca66c76ecddc69c6b726d0d0f092)


### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/f91decaa10cfa233c9e680c96ec7ae642e30a03c)

* [OCPBUGS-19192](https://issues.redhat.com/browse/OCPBUGS-19192): Updating ose-network-interface-bond-cni images to be consistent with ART [#59](https://github.com/openshift/bond-cni/pull/59)
* [Full changelog](https://github.com/openshift/bond-cni/compare/29f61f6b05d958c40e7213937064f26a63a8e6d9...f91decaa10cfa233c9e680c96ec7ae642e30a03c)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/024b56b755e2e93cdd142b736c2b6b289aca63cf)

* Updating ose-network-metrics-daemon images to be consistent with ART (#80) [#80](https://github.com/openshift/network-metrics-daemon/pull/80)
* [OCPBUGS-16594](https://issues.redhat.com/browse/OCPBUGS-16594): Update the dependencies to 0.27 (#79) [#79](https://github.com/openshift/network-metrics-daemon/pull/79)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/26574c6b3b74010701a27382084a456c5dddbd02...024b56b755e2e93cdd142b736c2b6b289aca63cf)


### [network-tools](https://github.com/openshift/network-tools/tree/e70e8a00d0bd066f740aa1a708deaaa1e2eeeb7a)

* [OCPBUGS-19292](https://issues.redhat.com/browse/OCPBUGS-19292): Updating ose-network-tools images to be consistent with ART [#87](https://github.com/openshift/network-tools/pull/87)
* [Full changelog](https://github.com/openshift/network-tools/compare/4d34d616da14681c9a4536776bdd81f4492d33c2...e70e8a00d0bd066f740aa1a708deaaa1e2eeeb7a)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/a87bd939d5c94392745fd52a784633476f5ddd13)

* [OCPBUGS-19214](https://issues.redhat.com/browse/OCPBUGS-19214): Updating ose-oauth-apiserver images to be consistent with ART [#90](https://github.com/openshift/oauth-apiserver/pull/90)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/a18cb3e10639b5789f7c291707064743feb105e2...a87bd939d5c94392745fd52a784633476f5ddd13)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/3fcbacd6e79223b707a9883c4d74cd81667b9b50)

* [OCPBUGS-18858](https://issues.redhat.com/browse/OCPBUGS-18858): Updating golang-github-openshift-oauth-proxy images to be consistent with ART [#265](https://github.com/openshift/oauth-proxy/pull/265)
* [OCPBUGS-16459](https://issues.redhat.com/browse/OCPBUGS-16459): bump kube and lib-go to get rid of goproxy dep [#260](https://github.com/openshift/oauth-proxy/pull/260)
* fix route apiVersion [#257](https://github.com/openshift/oauth-proxy/pull/257)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/c6de9055126dadb771460ef17e23435959a6d757...3fcbacd6e79223b707a9883c4d74cd81667b9b50)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/30f7828eb054d8f6a7efa4b2476524c86823f25b)

* [CFE-935](https://issues.redhat.com/browse/CFE-935): [V2] Implement a release collector relying on local registry as storage (#690) [#690](https://github.com/openshift/oc-mirror/pull/690)
* Fix OCPBUGS-17546: pod catalogsource generated by oc-mirror will crashloopBackOff randomly (#697) [#697](https://github.com/openshift/oc-mirror/pull/697)
* [CFE-956](https://issues.redhat.com/browse/CFE-956): feat: adds tags on the related images (#695) [#695](https://github.com/openshift/oc-mirror/pull/695)
* Updating oc-mirror-plugin images to be consistent with ART (#698) [#698](https://github.com/openshift/oc-mirror/pull/698)
* Update list updates CLI documentation (#687) [#687](https://github.com/openshift/oc-mirror/pull/687)
* [CFE-906](https://issues.redhat.com/browse/CFE-906): [V2]Enclave support - Separate log file for local storage (#686) [#686](https://github.com/openshift/oc-mirror/pull/686)
* [CFE-955](https://issues.redhat.com/browse/CFE-955): changes owner file (#694) [#694](https://github.com/openshift/oc-mirror/pull/694)
* [CFE-897](https://issues.redhat.com/browse/CFE-897), [CFE-907](https://issues.redhat.com/browse/CFE-907): feat: add code to call v2 from v1 (#692) [#692](https://github.com/openshift/oc-mirror/pull/692)
* [OCPBUGS-17545](https://issues.redhat.com/browse/OCPBUGS-17545): Improve extracting opm binary from catalogs (#676) [#676](https://github.com/openshift/oc-mirror/pull/676)
* [OCPBUGS-7465](https://issues.redhat.com/browse/OCPBUGS-7465): Fix 401 Unauthorized due to stale auth token (#678) [#678](https://github.com/openshift/oc-mirror/pull/678)
* Fix OCPBUGS-14402 - case where catalog is on a mirror from registries.conf (#682) [#682](https://github.com/openshift/oc-mirror/pull/682)
* [OCPBUGS-17998](https://issues.redhat.com/browse/OCPBUGS-17998): fix: ICSP with incorrect mirror path (#681) [#681](https://github.com/openshift/oc-mirror/pull/681)
* [OCPBUGS-17714](https://issues.redhat.com/browse/OCPBUGS-17714): Ensure errors are nil before closing registry to avoid… (#680) [#680](https://github.com/openshift/oc-mirror/pull/680)
* [CFE-825](https://issues.redhat.com/browse/CFE-825): As a oc-mirror user, I would like mirrored operator catalogs to have valid caches (#651) [#651](https://github.com/openshift/oc-mirror/pull/651)
* CFE-902 feat: removes go workspace due to incompatibility on ART builds (#672) [#672](https://github.com/openshift/oc-mirror/pull/672)
* CFE-902 feat: adds go workspace to support multi-module (#670) [#670](https://github.com/openshift/oc-mirror/pull/670)
* add go.mod files to testdata directories (#669) [#669](https://github.com/openshift/oc-mirror/pull/669)
* fixing `oc-mirror version` when run from read-only fs (#660) [#660](https://github.com/openshift/oc-mirror/pull/660)
* Make local storage port configurable via command line (#668) [#668](https://github.com/openshift/oc-mirror/pull/668)
* Fix unit tests for local storage collector implementation (#667) [#667](https://github.com/openshift/oc-mirror/pull/667)
* [CFE-904](https://issues.redhat.com/browse/CFE-904): Create AdditionalImage Collector implem. based on registry as localStore (#666) [#666](https://github.com/openshift/oc-mirror/pull/666)
* v2 initial commit (#664) [#664](https://github.com/openshift/oc-mirror/pull/664)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/c855919aa271c8afe0080a69497f5ca6aa7c904d...30f7828eb054d8f6a7efa4b2476524c86823f25b)


### [olm-catalogd](https://github.com/openshift/operator-framework-catalogd/tree/26be2be94fecc5f1fa0a1eef0fe918d3d97e5c85)

* [OCPBUGS-19117](https://issues.redhat.com/browse/OCPBUGS-19117): UPSTREAM: <carry>: Updating ose-olm-catalogd images to be consistent with ART [#28](https://github.com/openshift/operator-framework-catalogd/pull/28)
* [Full changelog](https://github.com/openshift/operator-framework-catalogd/compare/ac4c5ab4f7165352a9727591aee52ca953302f80...26be2be94fecc5f1fa0a1eef0fe918d3d97e5c85)


### [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/df95362a2a16c9ab2293f7197fd6198298c8ef18)

* [OCPBUGS-19096](https://issues.redhat.com/browse/OCPBUGS-19096): UPSTREAM: <carry>: Updating ose-olm-operator-controller images to be consistent with ART [#27](https://github.com/openshift/operator-framework-operator-controller/pull/27)
* Update to upstream v0.3.0 [#25](https://github.com/openshift/operator-framework-operator-controller/pull/25)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/361438243428bd29b310b54f9dcd5b64aff310de...df95362a2a16c9ab2293f7197fd6198298c8ef18)


### [olm-rukpak](https://github.com/openshift/operator-framework-rukpak/tree/951f4475f9dfa6b25a0a3d02bb1e36c943a8c9c5)

* [OCPBUGS-19167](https://issues.redhat.com/browse/OCPBUGS-19167): UPSTREAM: <carry>: Updating ose-olm-rukpak images to be consistent with ART [#35](https://github.com/openshift/operator-framework-rukpak/pull/35)
* [OCPBUGS-16793](https://issues.redhat.com/browse/OCPBUGS-16793): openshift/Dockerfile: exclude unpack binary from FIPS build overrides [#33](https://github.com/openshift/operator-framework-rukpak/pull/33)
* [Full changelog](https://github.com/openshift/operator-framework-rukpak/compare/fe39e182a63c271a0758e7c9900bf1dbdbece439...951f4475f9dfa6b25a0a3d02bb1e36c943a8c9c5)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/a17087b2dda492c9a8920b29f4be9cc882020169)

* [OCPBUGS-16514](https://issues.redhat.com/browse/OCPBUGS-16514): use import mode to manifest cache key [#386](https://github.com/openshift/openshift-apiserver/pull/386)
* [OCPBUGS-17674](https://issues.redhat.com/browse/OCPBUGS-17674): pkg/image: avoid unnecessary service lookups when registry is removed [#387](https://github.com/openshift/openshift-apiserver/pull/387)
* [OCPBUGS-5823](https://issues.redhat.com/browse/OCPBUGS-5823): remove unused service-ca roles [#388](https://github.com/openshift/openshift-apiserver/pull/388)
* NE-1143 Adds route API changes to set/delete headers. [#380](https://github.com/openshift/openshift-apiserver/pull/380)
* [WRKLDS-728](https://issues.redhat.com/browse/WRKLDS-728): Disable apiservers [#366](https://github.com/openshift/openshift-apiserver/pull/366)
* add comments about ownership of validation [#384](https://github.com/openshift/openshift-apiserver/pull/384)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/a61eaa141fcde880b9f7df35f67ce628097b3d56...a17087b2dda492c9a8920b29f4be9cc882020169)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/1d4fb5b041da1728a0ce499088abc339579b302f)

* [API-1651](https://issues.redhat.com/browse/API-1651): Create separate controllers for default service accounts [#272](https://github.com/openshift/openshift-controller-manager/pull/272)
* [API-1652](https://issues.redhat.com/browse/API-1652): bump go.mod go to 1.20 [#267](https://github.com/openshift/openshift-controller-manager/pull/267)
* [OCPBUGS-19136](https://issues.redhat.com/browse/OCPBUGS-19136): Updating ose-openshift-controller-manager images to be consistent with ART [#273](https://github.com/openshift/openshift-controller-manager/pull/273)
* [OCPBUGS-18498](https://issues.redhat.com/browse/OCPBUGS-18498): Disable Build and DeploymentConfig Informers if their caps are disabled [#270](https://github.com/openshift/openshift-controller-manager/pull/270)
* use constant controller names [#265](https://github.com/openshift/openshift-controller-manager/pull/265)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/80c4923e0b2014ec8b8a6845c21078e6cc036f91...1d4fb5b041da1728a0ce499088abc339579b302f)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/5cc63c002333e9d7510941305bb2458f630a8d33)

* [STOR-1276](https://issues.redhat.com/browse/STOR-1276): Enable support for mounting volumes with SELinux context [#129](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/129)
* [OCPBUGS-19213](https://issues.redhat.com/browse/OCPBUGS-19213): Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART [#133](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/133)
* [OSASINFRA-2139](https://issues.redhat.com/browse/OSASINFRA-2139): Document how we manage configuration [#110](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/110)
* [STOR-1436](https://issues.redhat.com/browse/STOR-1436): Restart `openstack-cinder-csi-driver-controller` Pods if metrics-serving-cert changed [#128](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/128)
* Remove Dockerfile.rhel7 [#126](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/126)
* Configure User Agent [#123](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/123)
* [OCPBUGS-16654](https://issues.redhat.com/browse/OCPBUGS-16654): Revert revert "STOR-1065: Rework sidecar bindings to b… [#119](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/119)
* [OCPBUGS-16783](https://issues.redhat.com/browse/OCPBUGS-16783): Chore: Update OWNERS and OWNERS_ALIASES [#121](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/121)
* [OCPBUGS-16526](https://issues.redhat.com/browse/OCPBUGS-16526): Bump library-go to remove dependency on goproxy [#122](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/122)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/a95a60983bf54c6bc5e6931b0ae0a309a6c47726...5cc63c002333e9d7510941305bb2458f630a8d33)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/4213f61e1a93569efc0edd4b114c7a9e65130461)

* [OCPBUGS-19156](https://issues.redhat.com/browse/OCPBUGS-19156): Updating ose-machine-api-provider-openstack images to be consistent with ART [#84](https://github.com/openshift/machine-api-provider-openstack/pull/84)
* Remove unnecessary print [#79](https://github.com/openshift/machine-api-provider-openstack/pull/79)
* Update OWNERS [#83](https://github.com/openshift/machine-api-provider-openstack/pull/83)
* make: Remove irrelevant/broken targets [#82](https://github.com/openshift/machine-api-provider-openstack/pull/82)
* Bug OCPBUGS-4629: Set controller's SyncPeriod to 1 hour [#59](https://github.com/openshift/machine-api-provider-openstack/pull/59)
* Bump CAPO to match branch release-0.7 [#80](https://github.com/openshift/machine-api-provider-openstack/pull/80)
* Configure User Agent [#75](https://github.com/openshift/machine-api-provider-openstack/pull/75)
* Update README [#77](https://github.com/openshift/machine-api-provider-openstack/pull/77)
* [OCPBUGS-16586](https://issues.redhat.com/browse/OCPBUGS-16586): Bump goproxy [#74](https://github.com/openshift/machine-api-provider-openstack/pull/74)
* Rework how we build the container image [#76](https://github.com/openshift/machine-api-provider-openstack/pull/76)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/5bf24027fb9d0be544f5ad40d29e625fd9c59fc0...4213f61e1a93569efc0edd4b114c7a9e65130461)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/e2338dcba4f9dca572d737deee3e6153cf44502a)

* [OCPBUGS-17157](https://issues.redhat.com/browse/OCPBUGS-17157): manifests: add $GOMEMLIMIT to PSM [#551](https://github.com/openshift/operator-framework-olm/pull/551)
* [OCPBUGS-19196](https://issues.redhat.com/browse/OCPBUGS-19196): Updating operator-registry images to be consistent with ART [#563](https://github.com/openshift/operator-framework-olm/pull/563)
* Skuznets/bump all [#567](https://github.com/openshift/operator-framework-olm/pull/567)
* [OCPBUGS-19257](https://issues.redhat.com/browse/OCPBUGS-19257): Updating operator-lifecycle-manager images to be consistent with ART [#564](https://github.com/openshift/operator-framework-olm/pull/564)
* [OPRUN-1873](https://issues.redhat.com/browse/OPRUN-1873): scripts/bumper: allow fetching using https [#561](https://github.com/openshift/operator-framework-olm/pull/561)
* [OCPBUGS-17950](https://issues.redhat.com/browse/OCPBUGS-17950): Make packageserver wakeup interval configurable [#555](https://github.com/openshift/operator-framework-olm/pull/555)
* scripts/bumper: automate pushing changes and creating PRs [#550](https://github.com/openshift/operator-framework-olm/pull/550)
* [OCPBUGS-17157](https://issues.redhat.com/browse/OCPBUGS-17157): scripts: add a Go-based bumper, sync upstream [#534](https://github.com/openshift/operator-framework-olm/pull/534)
* Add ncdc to DOWNSTREAM_OWNERS [#539](https://github.com/openshift/operator-framework-olm/pull/539)
* [OPRUN-3022](https://issues.redhat.com/browse/OPRUN-3022): Add support for make verify to sync script [#537](https://github.com/openshift/operator-framework-olm/pull/537)
* Add tmshort to owners [#535](https://github.com/openshift/operator-framework-olm/pull/535)
* fix the manifests generation [#533](https://github.com/openshift/operator-framework-olm/pull/533)
* Sync 2023 08 04 [#532](https://github.com/openshift/operator-framework-olm/pull/532)
* [OCPBUGS-17157](https://issues.redhat.com/browse/OCPBUGS-17157): sync [#531](https://github.com/openshift/operator-framework-olm/pull/531)
* [OCPBUGS-17157](https://issues.redhat.com/browse/OCPBUGS-17157): operator-registry: cherry-pick to be up-to-date [#526](https://github.com/openshift/operator-framework-olm/pull/526)
* [OCPBUGS-17157](https://issues.redhat.com/browse/OCPBUGS-17157): cmd/package-server-manager: add pprof endpoints [#527](https://github.com/openshift/operator-framework-olm/pull/527)
* [OPRUN-3021](https://issues.redhat.com/browse/OPRUN-3021): Improve README [#529](https://github.com/openshift/operator-framework-olm/pull/529)
* [OPRUN-2913](https://issues.redhat.com/browse/OPRUN-2913): Sync api, operator-registry, operator-lifecycle-manager downstream [#510](https://github.com/openshift/operator-framework-olm/pull/510)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/b4ce06432fc7504ad940331d558b0fd03325fbb9...e2338dcba4f9dca572d737deee3e6153cf44502a)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/42a5f19ffb33829c73be66c4803557ee142baa27)

* Update image tag to 4.15 for community operators [#534](https://github.com/operator-framework/operator-marketplace/pull/534)
* [OCPBUGS-19230](https://issues.redhat.com/browse/OCPBUGS-19230): Updating marketplace-operator images to be consistent with ART [#539](https://github.com/operator-framework/operator-marketplace/pull/539)
* Dockerfile: Align OKD and OCP [#531](https://github.com/operator-framework/operator-marketplace/pull/531)
* [OCPBUGS-15158](https://issues.redhat.com/browse/OCPBUGS-15158): Scope Marketplace Operator RBAC [#528](https://github.com/operator-framework/operator-marketplace/pull/528)
* [OCPBUGS-17157](https://issues.redhat.com/browse/OCPBUGS-17157): defaults: add memory targets to CatalogSources [#527](https://github.com/operator-framework/operator-marketplace/pull/527)
* [OCPBUGS-17157](https://issues.redhat.com/browse/OCPBUGS-17157): manifests: tune memory use [#526](https://github.com/operator-framework/operator-marketplace/pull/526)
* [OCPBUGS-17157](https://issues.redhat.com/browse/OCPBUGS-17157): bump controller-runtime, expose pprof, watch only one configmap [#525](https://github.com/operator-framework/operator-marketplace/pull/525)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/06e150e361b587296c0fbadd92ab218fe6058fdd...42a5f19ffb33829c73be66c4803557ee142baa27)


### [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt/tree/5d708631fca37aff0ede7d7f8fc9ba76c7fcee47)

* 15143237: Updating ose-ovirt-machine-controllers images to be consistent with ART [#174](https://github.com/openshift/cluster-api-provider-ovirt/pull/174)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ovirt/compare/22d89b3fd9e2e395a62f71092487d26c8940052e...5d708631fca37aff0ede7d7f8fc9ba76c7fcee47)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/484b1fe4461b425071e15b58fcd060ae91a3ba68)

* [OCPBUGS-17455](https://issues.redhat.com/browse/OCPBUGS-17455), [OCPBUGS-17641](https://issues.redhat.com/browse/OCPBUGS-17641), [OCPBUGS-18352](https://issues.redhat.com/browse/OCPBUGS-18352), [OCPBUGS-18549](https://issues.redhat.com/browse/OCPBUGS-18549), [OCPBUGS-19456](https://issues.redhat.com/browse/OCPBUGS-19456): [DownstreamMerge] 9-26-23 [#1907](https://github.com/openshift/ovn-kubernetes/pull/1907)
* [OCPBUGS-19013](https://issues.redhat.com/browse/OCPBUGS-19013): Dockerfile: Copy ovnkube-trace file for RHEL8 platform [#1887](https://github.com/openshift/ovn-kubernetes/pull/1887)
* [OCPBUGS-19501](https://issues.redhat.com/browse/OCPBUGS-19501): Add additonal certificate acceptance condition feature in ovnkube-ide… [#1895](https://github.com/openshift/ovn-kubernetes/pull/1895)
* Add ovnkube-identity binary to the downstream image [#1897](https://github.com/openshift/ovn-kubernetes/pull/1897)
* [OCPBUGS-19288](https://issues.redhat.com/browse/OCPBUGS-19288): Updating ovn-kubernetes-microshift images to be consistent with ART [#1883](https://github.com/openshift/ovn-kubernetes/pull/1883)
* [OCPBUGS-19278](https://issues.redhat.com/browse/OCPBUGS-19278): Updating ovn-kubernetes-base images to be consistent with ART [#1882](https://github.com/openshift/ovn-kubernetes/pull/1882)
* [OCPBUGS-16641](https://issues.redhat.com/browse/OCPBUGS-16641), [OCPBUGS-18572](https://issues.redhat.com/browse/OCPBUGS-18572), [OCPBUGS-19331](https://issues.redhat.com/browse/OCPBUGS-19331): [DownstreamMerge] 9-18-23 [#1885](https://github.com/openshift/ovn-kubernetes/pull/1885)
* [OCPBUGS-19004](https://issues.redhat.com/browse/OCPBUGS-19004), [OCPBUGS-19010](https://issues.redhat.com/browse/OCPBUGS-19010): Dockerfile: bump OVN to ovn23.09-23.09.0-beta.31.el9fdp [#1875](https://github.com/openshift/ovn-kubernetes/pull/1875)
* OCPBUGS-18895,OCPBUGS-14549,OCPBUGS-18402 [DownstreamMerge] 9-11-23 [#1868](https://github.com/openshift/ovn-kubernetes/pull/1868)
* [OCPBUGS-18467](https://issues.redhat.com/browse/OCPBUGS-18467): Fix OVN SNATing on GR by enabling gateway_mtu on rtoe port of GR [#1854](https://github.com/openshift/ovn-kubernetes/pull/1854)
* [OCPBUGS-14709](https://issues.redhat.com/browse/OCPBUGS-14709), [OCPBUGS-16617](https://issues.redhat.com/browse/OCPBUGS-16617), [OCPBUGS-18603](https://issues.redhat.com/browse/OCPBUGS-18603): Bump to OVN 23.09 [#1842](https://github.com/openshift/ovn-kubernetes/pull/1842)
* [OCPBUGS-18378](https://issues.redhat.com/browse/OCPBUGS-18378): LGW: Fix the precedence of rules in FORWARD chain [#1851](https://github.com/openshift/ovn-kubernetes/pull/1851)
* [OCPBUGS-17773](https://issues.redhat.com/browse/OCPBUGS-17773): Perf increases to pod deletion [#1847](https://github.com/openshift/ovn-kubernetes/pull/1847)
* [OCPBUGS-17731](https://issues.redhat.com/browse/OCPBUGS-17731): move clearInitialNodeNetworkUnavailableCondition to clustermanager [#1839](https://github.com/openshift/ovn-kubernetes/pull/1839)
* [OCPBUGS-18110](https://issues.redhat.com/browse/OCPBUGS-18110): Fix encap port configuration for remote chassis [#1836](https://github.com/openshift/ovn-kubernetes/pull/1836)
* [OCPBUGS-17406](https://issues.redhat.com/browse/OCPBUGS-17406), [OCPBUGS-17844](https://issues.redhat.com/browse/OCPBUGS-17844), [OCPBUGS-17970](https://issues.redhat.com/browse/OCPBUGS-17970): [DownstreamMerge] 24 Aug 2023 [#1833](https://github.com/openshift/ovn-kubernetes/pull/1833)
* [OCPBUGS-17867](https://issues.redhat.com/browse/OCPBUGS-17867): CARRY: Removes restriction for ip scope universe on node ips [#1822](https://github.com/openshift/ovn-kubernetes/pull/1822)
* 8-16-23 [#1820](https://github.com/openshift/ovn-kubernetes/pull/1820)
* [OCPBUGS-17666](https://issues.redhat.com/browse/OCPBUGS-17666): Downstream Merge august 15th 2023 [#1817](https://github.com/openshift/ovn-kubernetes/pull/1817)
* Downstream Merge 2023-8-10 [#1813](https://github.com/openshift/ovn-kubernetes/pull/1813)
* [OCPBUGS-17147](https://issues.redhat.com/browse/OCPBUGS-17147): [DownstreamMerge] 8 Aug 2023 [#1803](https://github.com/openshift/ovn-kubernetes/pull/1803)
* Downstream Merge 2023-08-03 [#1798](https://github.com/openshift/ovn-kubernetes/pull/1798)
* 8-1-23 [#1795](https://github.com/openshift/ovn-kubernetes/pull/1795)
* [OCPBUGS-16767](https://issues.redhat.com/browse/OCPBUGS-16767), [SDN-3507](https://issues.redhat.com/browse/SDN-3507), [SDN-3733](https://issues.redhat.com/browse/SDN-3733): [DownstreamMerge] 7-27-23 [#1789](https://github.com/openshift/ovn-kubernetes/pull/1789)
* [OCPBUGS-15811](https://issues.redhat.com/browse/OCPBUGS-15811): SDN-3733: Downstream Merge: 25th July 2023 [#1784](https://github.com/openshift/ovn-kubernetes/pull/1784)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/7d9a0d3920e6844b86681f455e30efdf6130c7a9...484b1fe4461b425071e15b58fcd060ae91a3ba68)


### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/f3f1f5d1161df6c25a0e1d04218dfc6447782ab4)

* [OCPBUGS-18854](https://issues.redhat.com/browse/OCPBUGS-18854): Updating prom-label-proxy images to be consistent with ART [#357](https://github.com/openshift/prom-label-proxy/pull/357)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/af40ed09f69fab6c4bf054436f537a3e569d5f02...f3f1f5d1161df6c25a0e1d04218dfc6447782ab4)


### [prometheus](https://github.com/openshift/prometheus/tree/f8f9fca1635d945713973d0ea5cfcaefe07bd3bc)

* update OWNERS file [#172](https://github.com/openshift/prometheus/pull/172)
* Bump openshift/prometheus to v2.47.0 [#168](https://github.com/openshift/prometheus/pull/168)
* [OCPBUGS-18846](https://issues.redhat.com/browse/OCPBUGS-18846): Updating golang-github-prometheus-prometheus images to be consistent with ART [#169](https://github.com/openshift/prometheus/pull/169)
* Bump openshift/prometheus to v2.46.0 [#167](https://github.com/openshift/prometheus/pull/167)
* [Full changelog](https://github.com/openshift/prometheus/compare/6b7a128733d24f28ef1ba7dd2ba2ad42353d4395...f8f9fca1635d945713973d0ea5cfcaefe07bd3bc)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/0051413cfd4c248eddbe4386d001e2563d3911d9)

* Bump openshift/prometheus-alertmanager to v0.26.0 [#78](https://github.com/openshift/prometheus-alertmanager/pull/78)
* update OWNERS file [#77](https://github.com/openshift/prometheus-alertmanager/pull/77)
* Bump v0.26.0 [#76](https://github.com/openshift/prometheus-alertmanager/pull/76)
* [OCPBUGS-18846](https://issues.redhat.com/browse/OCPBUGS-18846): Updating golang-github-prometheus-alertmanager images to be consistent with ART [#75](https://github.com/openshift/prometheus-alertmanager/pull/75)
* [OCPBUGS-18250](https://issues.redhat.com/browse/OCPBUGS-18250): Update alertmanager to 0.25.1 [#74](https://github.com/openshift/prometheus-alertmanager/pull/74)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/d6d234d631ee023aca97ec47d83766ba5e230f3a...0051413cfd4c248eddbe4386d001e2563d3911d9)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/e68bb0e8b372c5c763837c4efd9c55462086446e)

* update OWNERS file [#245](https://github.com/openshift/prometheus-operator/pull/245)
* [OCPBUGS-19108](https://issues.redhat.com/browse/OCPBUGS-19108): Updating prometheus-operator images to be consistent with ART [#242](https://github.com/openshift/prometheus-operator/pull/242)
* [OCPBUGS-19204](https://issues.redhat.com/browse/OCPBUGS-19204): Updating prometheus-operator-admission-webhook images to be consistent with ART [#244](https://github.com/openshift/prometheus-operator/pull/244)
* [OCPBUGS-19174](https://issues.redhat.com/browse/OCPBUGS-19174): Updating prometheus-config-reloader images to be consistent with ART [#243](https://github.com/openshift/prometheus-operator/pull/243)
* : Bump openshift/prometheus-operator to v0.68.0 [#241](https://github.com/openshift/prometheus-operator/pull/241)
* Bump openshift/prometheus-operator to v0.67.1 [#240](https://github.com/openshift/prometheus-operator/pull/240)
* Bump openshift/prometheus-operator to v0.67.0 [#239](https://github.com/openshift/prometheus-operator/pull/239)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/74215947fe97fc4f288937b597642ee058ed74de...e68bb0e8b372c5c763837c4efd9c55462086446e)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/6d732ddb4f2bf7072ba72d0006622ac1d75b5b56)

* update OWNERS file [#132](https://github.com/openshift/node_exporter/pull/132)
* [OCPBUGS-18850](https://issues.redhat.com/browse/OCPBUGS-18850): Updating golang-github-prometheus-node_exporter images to be consistent with ART [#131](https://github.com/openshift/node_exporter/pull/131)
* [Full changelog](https://github.com/openshift/node_exporter/compare/053bcf6fb45c460fbaccc810bdac91a3aaa4b6b0...6d732ddb4f2bf7072ba72d0006622ac1d75b5b56)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/b1399340162be837615609c172bbee297ef478cb)

* [WRKLDS-806](https://issues.redhat.com/browse/WRKLDS-806): bump k8s to 1.28 [#31](https://github.com/openshift/route-controller-manager/pull/31)
* [OCPBUGS-19202](https://issues.redhat.com/browse/OCPBUGS-19202): Updating ose-route-controller-manager images to be consistent with ART [#30](https://github.com/openshift/route-controller-manager/pull/30)
* refactor route controller manager to use library-go server and ControlerCommand for generic setup [#28](https://github.com/openshift/route-controller-manager/pull/28)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/5710699f4e7ec00a14fa3fe600b81d0f722fc1ff...b1399340162be837615609c172bbee297ef478cb)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/bbf914e4df0f60617b8480c1dc87f5f0cde1f82c)

* [OCPBUGS-19176](https://issues.redhat.com/browse/OCPBUGS-19176): Updating ose-service-ca-operator images to be consistent with ART [#221](https://github.com/openshift/service-ca-operator/pull/221)
* [OCPBUGS-8512](https://issues.redhat.com/browse/OCPBUGS-8512): fix admission webhook CA injection [#219](https://github.com/openshift/service-ca-operator/pull/219)
* [OCPBUGS-16536](https://issues.redhat.com/browse/OCPBUGS-16536): bump lib-go to get rid of the goproxy dep [#213](https://github.com/openshift/service-ca-operator/pull/213)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/46c0577bee18108d6cc7743b4876830630f88442...bbf914e4df0f60617b8480c1dc87f5f0cde1f82c)


### [telemeter](https://github.com/openshift/telemeter/tree/1568906f1f5a723f53409e2b9ac39bc30fec8c1d)

* [OCPBUGS-19248](https://issues.redhat.com/browse/OCPBUGS-19248): Updating telemeter images to be consistent with ART [#480](https://github.com/openshift/telemeter/pull/480)
* Fix: handle authorization server 403 responses [#479](https://github.com/openshift/telemeter/pull/479)
* [RHOBS-870](https://issues.redhat.com/browse/RHOBS-870): Improve logging [#477](https://github.com/openshift/telemeter/pull/477)
* [RHOBS-855](https://issues.redhat.com/browse/RHOBS-855): rhelemeter: Read client info/data from request [#476](https://github.com/openshift/telemeter/pull/476)
* [OCPBUGS-16397](https://issues.redhat.com/browse/OCPBUGS-16397): Nutanix OCP cluster telemetry data "host_type" shows "virt-unknown" [#474](https://github.com/openshift/telemeter/pull/474)
* chore: bump github.com/prometheus/prometheus to v0.45.0 [#475](https://github.com/openshift/telemeter/pull/475)
* [Full changelog](https://github.com/openshift/telemeter/compare/76213272326b432a504dd59db593b94890541342...1568906f1f5a723f53409e2b9ac39bc30fec8c1d)


### [tests](https://github.com/openshift/origin/tree/1e388c33867fb146b21bbf3e178b6e1d7dd9ae6c)

* kubevirt: Add live migration tests [#27980](https://github.com/openshift/origin/pull/27980)
* some monitor tests only function on disruptive tests [#28251](https://github.com/openshift/origin/pull/28251)
* wait for the service to have endpoints before starting pollers [#28242](https://github.com/openshift/origin/pull/28242)
* fix PR 28224 [#28238](https://github.com/openshift/origin/pull/28238)
* [OCPBUGS-18141](https://issues.redhat.com/browse/OCPBUGS-18141): retry query on MetricsAvailableAfterUpgradeTest setup [#28228](https://github.com/openshift/origin/pull/28228)
* Revert "OCPBUGS-18865: add monitortest: in-cluster disruption monitors" [#28274](https://github.com/openshift/origin/pull/28274)
* [OCPBUGS-19293](https://issues.redhat.com/browse/OCPBUGS-19293): Updating openshift-enterprise-tests images to be consistent with ART [#28264](https://github.com/openshift/origin/pull/28264)
* [OCPVE-295](https://issues.redhat.com/browse/OCPVE-295): rteval [#28261](https://github.com/openshift/origin/pull/28261)
* add pod log streaming to monitor for etcd so we see all intervals [#28243](https://github.com/openshift/origin/pull/28243)
* [OCPBUGS-18865](https://issues.redhat.com/browse/OCPBUGS-18865): add monitortest: in-cluster disruption monitors [#28231](https://github.com/openshift/origin/pull/28231)
* [AUTH-365](https://issues.redhat.com/browse/AUTH-365): add PodSecurityViolation to watched alerts [#28226](https://github.com/openshift/origin/pull/28226)
* [OCPBUGS-14053](https://issues.redhat.com/browse/OCPBUGS-14053): remove exception for MultipleDefaultStorageClasses [#28042](https://github.com/openshift/origin/pull/28042)
* remove unnecessary file from cmd folder [#27979](https://github.com/openshift/origin/pull/27979)
* [STOR-1425](https://issues.redhat.com/browse/STOR-1425): Update to Kubernetes 1.28 [#28097](https://github.com/openshift/origin/pull/28097)
* Revert "Improvements and fixes for Loki intervals uploader" [#28268](https://github.com/openshift/origin/pull/28268)
* Adding leader election information to timeline [#28225](https://github.com/openshift/origin/pull/28225)
* Improvements and fixes for Loki intervals uploader [#28053](https://github.com/openshift/origin/pull/28053)
* Bring in updates k8s to disable networking test [#28256](https://github.com/openshift/origin/pull/28256)
* When --from-repository use built-in tests only [#28253](https://github.com/openshift/origin/pull/28253)
* [HyperShift/KubeVirt] Raise wait time between pod exec attempts [#28249](https://github.com/openshift/origin/pull/28249)
* Revert fake image injections for k8s 1.28 [#28250](https://github.com/openshift/origin/pull/28250)
* [STOR-1425](https://issues.redhat.com/browse/STOR-1425): Add images coming in k8s 1.28 [#28248](https://github.com/openshift/origin/pull/28248)
* [OCP-66086](https://issues.redhat.com/browse/OCP-66086): Automate PSAP NTO Prevent from stalld continually restarting [#28157](https://github.com/openshift/origin/pull/28157)
* Bug OCPBUGS-18718 Remove duplicate connection type from disruption name [#28245](https://github.com/openshift/origin/pull/28245)
* [OCPVE-295](https://issues.redhat.com/browse/OCPVE-295): fix: add rteval to the test image [#28220](https://github.com/openshift/origin/pull/28220)
* [STOR-1425](https://issues.redhat.com/browse/STOR-1425): Add images coming in k8s 1.28 [#28200](https://github.com/openshift/origin/pull/28200)
* [STOR-1425](https://issues.redhat.com/browse/STOR-1425): Disable NetworkPolicyStatus tests [#28177](https://github.com/openshift/origin/pull/28177)
* [USHIFT-1590](https://issues.redhat.com/browse/USHIFT-1590): skip failing invariants in MicroShift [#28193](https://github.com/openshift/origin/pull/28193)
* Revert "created persistent volume claims can not exceed the limitation" [#28232](https://github.com/openshift/origin/pull/28232)
* Revert "in-cluster disruption: ensure that only one monitor is started in cluster" [#28230](https://github.com/openshift/origin/pull/28230)
* created persistent volume claims can not exceed the limitation [#28224](https://github.com/openshift/origin/pull/28224)
* Revert "Fail on APIs removed in the next release" [#28227](https://github.com/openshift/origin/pull/28227)
* [OCPBUGS-13158](https://issues.redhat.com/browse/OCPBUGS-13158): in-cluster disruption: ensure that only one monitor is started in cluster [#28081](https://github.com/openshift/origin/pull/28081)
* Fail on APIs removed in the next release [#27561](https://github.com/openshift/origin/pull/27561)
* Service invariant [#28202](https://github.com/openshift/origin/pull/28202)
* prevent secondary errors reported in prior steps [#28221](https://github.com/openshift/origin/pull/28221)
* [OCPBUGS-17477](https://issues.redhat.com/browse/OCPBUGS-17477): requestheader: wait for only 3 oauth-servers to be available [#28161](https://github.com/openshift/origin/pull/28161)
* [test/extended/networking] Rename ovnkube containers [#28219](https://github.com/openshift/origin/pull/28219)
* Reduce usage of dcs [#28212](https://github.com/openshift/origin/pull/28212)
* Do not fail etcd storage path test for GVRs that are not served. [#28214](https://github.com/openshift/origin/pull/28214)
* move graceful shutdown to monitor test [#28201](https://github.com/openshift/origin/pull/28201)
* move PDBUnhealthyPodEvictionPolicy from TP to beta [#28206](https://github.com/openshift/origin/pull/28206)
* if no openshift-tests image can be auto-detected or specified, skip it [#28207](https://github.com/openshift/origin/pull/28207)
* allow failures for tests intentionally producing failures [#28211](https://github.com/openshift/origin/pull/28211)
* fix *-to-host sampler failure calculation [#28209](https://github.com/openshift/origin/pull/28209)
* skip test with intermittent serial problems [#28208](https://github.com/openshift/origin/pull/28208)
* point host network, network disruption at the kubelet [#28191](https://github.com/openshift/origin/pull/28191)
* migrate some watching code to monitortests [#28188](https://github.com/openshift/origin/pull/28188)
* fail if no sampler output is found for the poller [#28198](https://github.com/openshift/origin/pull/28198)
* Fix possibility of intervals without from/to by requiring when we Build() [#28182](https://github.com/openshift/origin/pull/28182)
* [OCPBUGS-17497](https://issues.redhat.com/browse/OCPBUGS-17497): Skip invariant load balancer test for None platform [#28180](https://github.com/openshift/origin/pull/28180)
* tolerate cluster without clusterversion [#28197](https://github.com/openshift/origin/pull/28197)
* select poller image from payload [#28194](https://github.com/openshift/origin/pull/28194)
* [AUTH-409](https://issues.redhat.com/browse/AUTH-409): bump o/k for the updated PSa labels [#28192](https://github.com/openshift/origin/pull/28192)
* Fixes openshift-tests dry-run failure asking for KUBERNETES_MASTER [#28165](https://github.com/openshift/origin/pull/28165)
* [TRT-930](https://issues.redhat.com/browse/TRT-930): Update test to support 2 release query_results.json [#28149](https://github.com/openshift/origin/pull/28149)
* add e2e non-functional test for required-scc SCCs [#28142](https://github.com/openshift/origin/pull/28142)
* Add a test to flake if we see NetworkManager log "too many netlink events" [#28098](https://github.com/openshift/origin/pull/28098)
* [OCPBUGS-16615](https://issues.redhat.com/browse/OCPBUGS-16615): Making prometheus telemetry test flake [#28181](https://github.com/openshift/origin/pull/28181)
* update watch-endpoint-slices to usable shape [#28184](https://github.com/openshift/origin/pull/28184)
* add comments requested in review [#28186](https://github.com/openshift/origin/pull/28186)
* rebrand invariant tests as monitor tests [#28185](https://github.com/openshift/origin/pull/28185)
* basic setup of podNetwork disruption tests [#28179](https://github.com/openshift/origin/pull/28179)
* start the watch-endpoint-slice command [#28169](https://github.com/openshift/origin/pull/28169)
* stop sampling when we stop [#28178](https://github.com/openshift/origin/pull/28178)
* run start and collect in parallel [#28174](https://github.com/openshift/origin/pull/28174)
* only close node ready if the node was not ready before [#28170](https://github.com/openshift/origin/pull/28170)
* make monitor command separately runnable [#28168](https://github.com/openshift/origin/pull/28168)
* [OCPBUGS-15726](https://issues.redhat.com/browse/OCPBUGS-15726): add tests for openapi v3 [#28129](https://github.com/openshift/origin/pull/28129)
* fix microshift fix that broke all disruption [#28175](https://github.com/openshift/origin/pull/28175)
* Add stlaz and p0lyn0mial to OWNERS [#28166](https://github.com/openshift/origin/pull/28166)
* [OCPBUGS-15726](https://issues.redhat.com/browse/OCPBUGS-15726): Revert "temporarily disable oc explain tests until openapi/v3 is working" [#28155](https://github.com/openshift/origin/pull/28155)
* Add some tests for event interval generation [#28163](https://github.com/openshift/origin/pull/28163)
* [USHIFT-1464](https://issues.redhat.com/browse/USHIFT-1464): skip TestFrontProxy for MicroShift [#28064](https://github.com/openshift/origin/pull/28064)
* upgrade distribution to v3 [#27958](https://github.com/openshift/origin/pull/27958)
* Skip external service monitoring invariant for microshift [#28160](https://github.com/openshift/origin/pull/28160)
* Refactor e2e-test intervals to use the new locator builder [#28099](https://github.com/openshift/origin/pull/28099)
* [OCPBUGS-16166](https://issues.redhat.com/browse/OCPBUGS-16166): Update to Kubernetes 1.27.4 [#28147](https://github.com/openshift/origin/pull/28147)
* Remove obsolete buildanalyzer tool [#28158](https://github.com/openshift/origin/pull/28158)
* Bug OCPBUGS-17483: Skip invariant load balancer test for OpenStack [#28154](https://github.com/openshift/origin/pull/28154)
* be sure the exit code fails when the invariant tests fail [#28152](https://github.com/openshift/origin/pull/28152)
* [OCPBUGS-17351](https://issues.redhat.com/browse/OCPBUGS-17351): Skip some invariants in microshift [#28136](https://github.com/openshift/origin/pull/28136)
* [OCPBUGS-16166](https://issues.redhat.com/browse/OCPBUGS-16166): disable 2 tests in preparation to land k8s 1.27.4 [#28148](https://github.com/openshift/origin/pull/28148)
* Fix kubevirt test flake caused by pod name collision [#28153](https://github.com/openshift/origin/pull/28153)
* move the discovery filtering into suite filtering instead of post filtering [#28145](https://github.com/openshift/origin/pull/28145)
* move remaining disruption tests to invariants [#28144](https://github.com/openshift/origin/pull/28144)
* Disable EgressIP test termporarily due to OVN-K bug [#28146](https://github.com/openshift/origin/pull/28146)
* Bug OCPBUGS-6778: Correct condition for rejecting connection [#27876](https://github.com/openshift/origin/pull/27876)
* [USHIFT-1484](https://issues.redhat.com/browse/USHIFT-1484): skip prometheus alerts for MicroShift [#28070](https://github.com/openshift/origin/pull/28070)
* remove unnecessary global modification from upgrade [#28143](https://github.com/openshift/origin/pull/28143)
* [OCPBUGS-16615](https://issues.redhat.com/browse/OCPBUGS-16615): Moving Prometheus reporting telemetry to serial jobs [#28138](https://github.com/openshift/origin/pull/28138)
* [OCPBUGS-15568](https://issues.redhat.com/browse/OCPBUGS-15568): Set quota wait timeout to 1 minute [#28071](https://github.com/openshift/origin/pull/28071)
* rough package alignment [#28131](https://github.com/openshift/origin/pull/28131)
* return calculated intervals [#28141](https://github.com/openshift/origin/pull/28141)
* move existing invariant tests [#28130](https://github.com/openshift/origin/pull/28130)
* remove extraneous layering for the monitor [#28127](https://github.com/openshift/origin/pull/28127)
* Fix ClusterOperator tests that can only report failures [#28120](https://github.com/openshift/origin/pull/28120)
* properly categorize the stop and start intervals [#28139](https://github.com/openshift/origin/pull/28139)
* [MON-1960](https://issues.redhat.com/browse/MON-1960): Remove exceptions for alert annotations [#28118](https://github.com/openshift/origin/pull/28118)
* Revert invariant and other refactors [#28133](https://github.com/openshift/origin/pull/28133)
* Remove exception on KubeSchedulerDown runbook [#28126](https://github.com/openshift/origin/pull/28126)
* expedient engineering: inject intervals into recorded events from out… [#28128](https://github.com/openshift/origin/pull/28128)
* Add Fabio and remove Stefan from image approvers [#28125](https://github.com/openshift/origin/pull/28125)
* separate the run, run-upgrade, and run-test [#28121](https://github.com/openshift/origin/pull/28121)
* Remove enabling multinetwork policy [#28116](https://github.com/openshift/origin/pull/28116)
* [OCPVE-292](https://issues.redhat.com/browse/OCPVE-292): OCPVE-293: OCPVE-294: feat: added a realtime latency test suite [#28110](https://github.com/openshift/origin/pull/28110)
* Update image mirroring instructions to handle uncompressed layers [#28101](https://github.com/openshift/origin/pull/28101)
* protect against nil panic on unassigned disruption adapter [#28123](https://github.com/openshift/origin/pull/28123)
* fix: workload partitioning - added more error handling for retry attempts [#28111](https://github.com/openshift/origin/pull/28111)
* Revert "adds legacy disruption to invariant tests" [#28117](https://github.com/openshift/origin/pull/28117)
* adds legacy disruption to invariant tests [#28104](https://github.com/openshift/origin/pull/28104)
* refactor command line start for openshift-tests [#28107](https://github.com/openshift/origin/pull/28107)
* oauth requestheaders: gather oauth-server logs as admin [#28114](https://github.com/openshift/origin/pull/28114)
* Automated - Update synthetic test data [#28108](https://github.com/openshift/origin/pull/28108)
* [SDN-4042](https://issues.redhat.com/browse/SDN-4042): Increase total upgrade time on OVN platforms [#28074](https://github.com/openshift/origin/pull/28074)
* Update image stream test to create a manifest list image by default [#28017](https://github.com/openshift/origin/pull/28017)
* Adjust interval builder before we continue porting [#28109](https://github.com/openshift/origin/pull/28109)
* Put times in UTC to allow local testing; use asserts where we can [#28091](https://github.com/openshift/origin/pull/28091)
* feat: make data gathering more robust [#28102](https://github.com/openshift/origin/pull/28102)
* remove suite hook configuration and make information flow one-way [#28090](https://github.com/openshift/origin/pull/28090)
* [USHIFT-1463](https://issues.redhat.com/browse/USHIFT-1463): add [apigroup] annotation to skip tests for MicroShift [#28061](https://github.com/openshift/origin/pull/28061)
* [OCPVE-318](https://issues.redhat.com/browse/OCPVE-318): feat: add node validation for workload partitioning [#28056](https://github.com/openshift/origin/pull/28056)
* Unrevert pull request #28069 from dgoodwin/interval-builder [#28095](https://github.com/openshift/origin/pull/28095)
* [Full changelog](https://github.com/openshift/origin/compare/716645def800fb24fbf06cd8dc079700e2bbe55e...1e388c33867fb146b21bbf3e178b6e1d7dd9ae6c)


### [thanos](https://github.com/openshift/thanos/tree/cd5f4bcc3a02b2b9bb0f67bc292ef092a61448e2)

* [OCPBUGS-19406](https://issues.redhat.com/browse/OCPBUGS-19406): Fix rh-manifest.txt generation [#120](https://github.com/openshift/thanos/pull/120)
* [OCPBUGS-19206](https://issues.redhat.com/browse/OCPBUGS-19206): Updating thanos images to be consistent with ART [#117](https://github.com/openshift/thanos/pull/117)
* Bump openshift/thanos to v0.32.3 [#118](https://github.com/openshift/thanos/pull/118)
* update OWNERS file [#119](https://github.com/openshift/thanos/pull/119)
* Bump Thanos v0.32.2 [#115](https://github.com/openshift/thanos/pull/115)
* [Full changelog](https://github.com/openshift/thanos/compare/baf119a6ad26c2b8aeb05b7d044567dc671065df...cd5f4bcc3a02b2b9bb0f67bc292ef092a61448e2)