# 4.2.33

Created: 2020-05-07 23:25:58 +0000 UTC

Image Digest: `sha256:df1f08092d3b6c512a4f8b5d5934ada990f54e5ac67e3abd85d33a351e5386a5`

Promoted from registry.svc.ci.openshift.org/ocp-s390x/release-s390x:4.2.0-0.nightly-s390x-2020-05-07-175527


## Changes from 4.2.16

### Components

* Kubernetes 1.14.6


### Rebuilt images without code change

* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [a2a47790](https://github.com/openshift/cluster-api-provider-baremetal/commit/a2a477909c1d518ef7cf28601e5d7db56a4d4069) `sha256:698a2096b27d56c743bb0edb2152670be1708e8cb40d8a1f567feba156166da4`
* [baremetal-operator](https://github.com/openshift/baremetal-operator) git [7869f83d](https://github.com/openshift/baremetal-operator/commit/7869f83d0e93fdb9c589eaf66b7d459d67b39f83) `sha256:70b1f646e6f97d06eb28a977b6b9bcbcc538ff9f9f2dcaca7641b4187084aec7`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [d22abd22](https://github.com/openshift/baremetal-runtimecfg/commit/d22abd22d1f7f227721b29f9c842c23d846021d1) `sha256:ee73be314afbc19114d3ea64233df6c919004a45baff7b47b8ef8644a233b2cc`
* [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator) git [ed95fe78](https://github.com/openshift/cluster-authentication-operator/commit/ed95fe78361f5ba05b9464a7972fe89b00e1dc86) `sha256:7b68beef6bda94c1b7af4be1d265cd9befb530177bbe930738434f5a955eda89`
* [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler) git [c44b83da](https://github.com/openshift/kubernetes-autoscaler/commit/c44b83dacbdd3dc6bc051c96a1b0d6f6865c685b) `sha256:9c487fdb9ae107dd96a6fac98ffc5a06181f7e661c51b9ef31764aef28796561`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [0ea559ca](https://github.com/openshift/cluster-autoscaler-operator/commit/0ea559ca1490d7bea4fb7ee6c3619b7696b2ef49) `sha256:c870c2d02306eb1243a7f907ad609c92691aba42c155989ea9c859be23fd24ef`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [106f76b4](https://github.com/openshift/cluster-bootstrap/commit/106f76b4d183cc24e58d26b3b57b2bf1e2362a9d) `sha256:b0a70d15eca4ed3a4e45ece974ebb0ac434144f8815d941e35f18f1e45198795`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [7e4895c7](https://github.com/openshift/cluster-config-operator/commit/7e4895c7e79826566b0bcfab724b8b21cecc597d) `sha256:55ff91302be294c63ddc390c1a9e304dec593ad23294bede40d63af66555be61`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [221cae05](https://github.com/openshift/cluster-dns-operator/commit/221cae05254ff889f2ad0f4c08e8b82618d95a0b) `sha256:d62770945c220f2219002f362f09a6747a5b63875df874bb5e902127e389237d`
* [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator) git [c0a5e5eb](https://github.com/openshift/cluster-ingress-operator/commit/c0a5e5eb5a9e80dd304f4e49066e4bf52708be4a) `sha256:304ed0b73c36e548d19f653b47bcba2f093a7fba95d5dcc8fcc276650c59fa9b`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [a226e0fc](https://github.com/openshift/cluster-machine-approver/commit/a226e0fc46cabee7186de69e7409020c861e454c) `sha256:9b39e5e47db63dd93f47d4d788730d7aeab467bcb4fbe132f92669bf71673c46`
* [cluster-node-tuned](https://github.com/openshift/openshift-tuned) git [eeaa9721](https://github.com/openshift/openshift-tuned/commit/eeaa972122468e5521344d3d88e18565f308c304) `sha256:68db9364e0baeaf661ab8efd1823e0d53245bc87221e8f49184423600f8d35e8`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [76ae60eb](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/76ae60eb1baa4496a5097c3be282873f99ea70d3) `sha256:4fcd38a4b301b8f9ce9147c79b595126619e6c2aecc0d986b6cc17d86a5ce249`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [377cff19](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/377cff19428838c0b2c4fbde762e535471922a92) `sha256:30e3d03157e6c8b39ee30be0717b0ecee258b206c21dd17462c6219b97e38b45`
* [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator) git [8682a2af](https://github.com/openshift/cluster-storage-operator/commit/8682a2af65d0a2199432b97db531ddfe68e5d9b2) `sha256:b9d95a91921b3c745ff583be404523a3f213c4665f6a3fec47032db47bae69e3`
* [cluster-svcat-apiserver-operator](https://github.com/openshift/cluster-svcat-apiserver-operator) git [f8b8b5b3](https://github.com/openshift/cluster-svcat-apiserver-operator/commit/f8b8b5b355d0b525d25600fe8713297be0a3e8bf) `sha256:78e8b98e3c8d5f4280ea5802fcb44a54d2a2e9cb894f58895aa353229b83d021`
* [cluster-svcat-controller-manager-operator](https://github.com/openshift/cluster-svcat-controller-manager-operator) git [9ef3f62c](https://github.com/openshift/cluster-svcat-controller-manager-operator/commit/9ef3f62c4b3d7b824c9b0b86c2081d694faff5ea) `sha256:60603ded5a7ac36e23f6bbaa27c7453b94b6c88b5c6429b27bff62ab19d2f2c2`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [cca4ce69](https://github.com/openshift/cluster-update-keys/commit/cca4ce696383e70ae669e770bd63265a9540b721) `sha256:9f290c6dc0041849f0093f94b671c67b6516561234b68e26a3d91a801c7114e1`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [841b0bfe](https://github.com/openshift/configmap-reload/commit/841b0bfe743999fcc9b0528ea689f728eb92aee7) `sha256:a2a61d82b45947b178f4b1f916514c414005596d2bd66cda439cb29c6dd39cc3`
* [console-operator](https://github.com/openshift/console-operator) git [c7f433db](https://github.com/openshift/console-operator/commit/c7f433dbe8da9750b119cfad367d51f127baf826) `sha256:ff377b1d34e139be95d281c8691b9654b5bda7334276873de4db0e87599f7c00`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [b5e1059a](https://github.com/openshift/containernetworking-plugins/commit/b5e1059a79397ef886a8047cb4c61919c787f5f5) `sha256:d0310cd57829badfd71facbfdaf107695897a0d2089e982677ce237a566d21ca`
* [coredns](https://github.com/openshift/coredns) git [51569b24](https://github.com/openshift/coredns/commit/51569b24b4a92d6d8df2020c2e8e2866c5e78266) `sha256:c1a86dc84ae10cee9c50f08712dda6ac00d324180d757b71c6a6569a1ded2e1e`
* [docker-registry](https://github.com/openshift/image-registry) git [a7655f19](https://github.com/openshift/image-registry/commit/a7655f1922932b3b0b2a70c2f20e4e6fbc8c70a0) `sha256:bd5d5cdca6230278dfe3eb5f8a9d255c193fcdc6aedcae22adb8b39fe4062d23`
* [etcd](https://github.com/openshift/etcd) git [3ebe3d9f](https://github.com/openshift/etcd/commit/3ebe3d9fa2302e5ae4712781caac61fc12d5f7f9) `sha256:12b243a33c39376d90452567f32619782388fd26d1d2c3b0ba8dce4db2fb2ad2`
* [grafana](https://github.com/openshift/grafana) git [91b439ee](https://github.com/openshift/grafana/commit/91b439eee0cf1ac742ef63cf2a8f7fc9ea3e1432) `sha256:449a1b5ea4f2dd37836a720ca25db8e1c4051a3ed2074309be2dd6eacd657577`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [9c5a42a3](https://github.com/openshift/k8s-prometheus-adapter/commit/9c5a42a3fb4bd2adfa24fc10292a36becc669e1e) `sha256:5e37b6acba9991fe8614de44a3c95493378ff6b1304df87607f27209e86a2a6f`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [2658b244](https://github.com/openshift/kube-rbac-proxy/commit/2658b2444b9992ea474177c73ca9f40f68f04304) `sha256:404cbdcec10cf218eb15f4525d355fd2c2b815586f5c546106e32cf5162406c3`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [07b29740](https://github.com/openshift/kube-state-metrics/commit/07b29740ca81f5ddf527b8eb700247f7be4474a8) `sha256:384a67480dc93ca80a3535c24e7a9f7ad6b676bf20fbbbd08087de5dd233bbcf`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [79d3a265](https://github.com/openshift/cluster-api-provider-libvirt/commit/79d3a265492b1658d57ca6ff1f610ebd7efc59cf) `sha256:7e431d3798f9f25532a20b854beccc5cec509c747f2197b098bb72a78542cc06`
* [local-storage-static-provisioner](https://github.com/openshift/sig-storage-local-static-provisioner) git [da340b47](https://github.com/openshift/sig-storage-local-static-provisioner/commit/da340b475eb847c17cefe2f2f9bf9be1a3382d4a) `sha256:7cd5ad17fe9351e597b6479fd4226e4ddc071bb84d9b4925ae5dbc3aa351b544`
* [machine-api-operator](https://github.com/openshift/machine-api-operator) git [474e14e4](https://github.com/openshift/machine-api-operator/commit/474e14e4965a8c5e6788417c851ccc7fad1acb3a) `sha256:307aff6676059a1b30999ab8c7398b6b5241289df4e6cb202f22f3dcb91fb59b`
* machine-os-content `sha256:e041ab9683186c4b4a87c953428a3c2eb626524aa62fccf5b04001c401ca24ec`
* [mdns-publisher](https://github.com/openshift/mdns-publisher) git [b02f19c5](https://github.com/openshift/mdns-publisher/commit/b02f19c5243c9a3ef41eafc41e9d90a24adc0f60) `sha256:31f16f6fefe3f43b34b696670c85acddb1b93b282eaf5ede1c65023ff291c0e7`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [ccd6c61c](https://github.com/openshift/multus-admission-controller/commit/ccd6c61c10aaa02c31a2053a1a6ac587cee6abb6) `sha256:7b0b11ea88071a08b53212f35f1ffd5323c3b030c1349ed30ff0118cb18e455f`
* [multus-cni](https://github.com/openshift/multus-cni) git [d3a18156](https://github.com/openshift/multus-cni/commit/d3a1815632cc3e1c7beb10165f960b4708d097fa) `sha256:137abec3a29748beedda00600cf564853af59d2c0679b069269307fba5ee7b53`
* [must-gather](https://github.com/openshift/must-gather) git [318faeff](https://github.com/openshift/must-gather/commit/318faeffd87d70d6727fd4cb30da28aab7c87da3) `sha256:3b5ab2b10e5b72815a964a549a8144989758e976c7908b8e83159d72adeec110`
* [oauth-server](https://github.com/openshift/oauth-server) git [3ac077fa](https://github.com/openshift/oauth-server/commit/3ac077fa8097fb851532453fa6e772e1dcfcb3bb) `sha256:9ae8c66dbfaba19b83af99ef00012ef8a2fb700fe47225dfb7cbdaef6e800d32`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [79fb7a5f](https://github.com/openshift/openshift-controller-manager/commit/79fb7a5f3d8417766529150986eb5648bf65b733) `sha256:ad8cc26c54f51b9a55143c4e13f917fd4704f92c7e78854dd27e207b3213ea47`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [c01d2de6](https://github.com/openshift/openshift-state-metrics/commit/c01d2de651071389d2621c46e934fd9cb2bf4b8d) `sha256:31b5449c71a9b3e0deb70ae8333d6eb9d6c4acba8ae99a3282c9761fc9a7eea6`
* [openstack-machine-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [52a3e249](https://github.com/openshift/cluster-api-provider-openstack/commit/52a3e249a7053149b08374fd989fd5543d3bdcbd) `sha256:0db593c430ed61058afffd3b988e68e9be3b3242759a7fc23d2ca521d6861efc`
* [operator-registry](https://github.com/operator-framework/operator-registry) git [98ebd340](https://github.com/operator-framework/operator-registry/commit/98ebd3400de159c019b864c6ef7c17eb426d9698) `sha256:138c2e3e7accf8143638e2720108739da17f10ebb6d0616fca93efba0fec62a7`
* [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes) git [9f13be1d](https://github.com/openshift/ovn-kubernetes/commit/9f13be1d317c5c57b4ffb7102cee7b2c2f035cac) `sha256:2839c3d7c34159784b08bf3e0e6b8e52d296e55de432be033d25876af6799a1d`
* [pod](https://github.com/openshift/images) git [1be922de](https://github.com/openshift/images/commit/1be922de56a99f4e254eb9c2fc42d30e5596cf77) `sha256:483616a798013e85fb70a966496a295a5afdfb5a810d5f1873bbbfba6c9f08f4`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [dd9a418a](https://github.com/openshift/prom-label-proxy/commit/dd9a418af5835ddb1a5181ae6f1303f86d8b1ef3) `sha256:735c9725f5bb44b54658f8549995890624c2daaedfd97cafd00576c4c0da7ab2`
* [prometheus](https://github.com/openshift/prometheus) git [52650c0f](https://github.com/openshift/prometheus/commit/52650c0fd84e82e20b5dcfa283c69a9e7ada16cb) `sha256:8cdc53f319779b8c73eb0981c0dd56d562aca9f8e6aca360c6021b8a2b0a738e`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [6858fa0f](https://github.com/openshift/prometheus-alertmanager/commit/6858fa0f51a7d37db0bb7ff7497aaeef3333f18b) `sha256:db7a3e872a627a275acffe998da151cfbe7c32a8541c016af4b787809a5d504d`
* [service-catalog](https://github.com/openshift/service-catalog) git [7d8b2a29](https://github.com/openshift/service-catalog/commit/7d8b2a29d2e6f1daa81b9b788c944f07cf3513e1) `sha256:21a829f749926f73427a38b2bf38e160f86fe29a15203d9126e4bd5c2b7619b5`
* [telemeter](https://github.com/openshift/telemeter) git [152b1b33](https://github.com/openshift/telemeter/commit/152b1b3355fbc5c9ed760b58f2fe6fc8fc082d31) `sha256:aa913ea77d73996359073d199f2a423e856b3b143af1e367cbd8654513832efa`


### [aws-machine-controllers, azure-machine-controllers, cli, cli-artifacts, deployer, gcp-machine-controllers, ironic, ironic-inspector, ironic-ipa-downloader, ironic-rhcos-downloader, ironic-static-ip-manager, keepalived-ipfailover, kuryr-cni, kuryr-controller](https://github.com/openshift/oc/tree/1337b299ce122ba5f4d38fa6d8aea1ca202fd009)

* [Bug 1795312](https://bugzilla.redhat.com/show_bug.cgi?id=1795312): initialize auth plugins [#270](https://github.com/openshift/oc/pull/270)
* [Bug 1789869](https://bugzilla.redhat.com/show_bug.cgi?id=1789869): allow --config and --kubeconfig [#248](https://github.com/openshift/oc/pull/248)
* [Full changelog](https://github.com/openshift/oc/compare/7207690010f08f2ae526ee3300d4a18ea65997fe...1337b299ce122ba5f4d38fa6d8aea1ca202fd009)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/202b1e3725e1b7e98771515891c39e645d0c48fe)

* [Bug 1827795](https://bugzilla.redhat.com/show_bug.cgi?id=1827795): OpenStack: Replace remote_group_id with remote_ip_prefix [#3505](https://github.com/openshift/installer/pull/3505)
* [Bug 1803221](https://bugzilla.redhat.com/show_bug.cgi?id=1803221): use region info when simulating permissions [#3142](https://github.com/openshift/installer/pull/3142)
* [Bug 1788585](https://bugzilla.redhat.com/show_bug.cgi?id=1788585): OpenStack: create security rules sequentially [#2888](https://github.com/openshift/installer/pull/2888)
* [Bug 1793128](https://bugzilla.redhat.com/show_bug.cgi?id=1793128): enable s390x bootimage support [#2933](https://github.com/openshift/installer/pull/2933)
* [Bug 1788707](https://bugzilla.redhat.com/show_bug.cgi?id=1788707): Backport Azure private DNS to 4.2 branch [#2825](https://github.com/openshift/installer/pull/2825)
* [Bug 1778969](https://bugzilla.redhat.com/show_bug.cgi?id=1778969): Default new file and directory permissions to not be world readable [#2793](https://github.com/openshift/installer/pull/2793)
* [Full changelog](https://github.com/openshift/installer/compare/90f3dffe9089583c714ef6833fd86fa8d7523a13...202b1e3725e1b7e98771515891c39e645d0c48fe)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/3a1e5f22704e1c780076164654dcc68c632e0b42)

* [Bug 1819183](https://bugzilla.redhat.com/show_bug.cgi?id=1819183): handle old Infrastructure objects without PlatformStatus [#173](https://github.com/openshift/cloud-credential-operator/pull/173)
* [Bug 1803221](https://bugzilla.redhat.com/show_bug.cgi?id=1803221): improve permissions simulation by adding region info [#157](https://github.com/openshift/cloud-credential-operator/pull/157)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/b905f49fd022cdc6674a85fa4bcf0f423128831b...3a1e5f22704e1c780076164654dcc68c632e0b42)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/2f08889ca73fd78cc8432ec8a03762a92b8ef011)

* [Bug 1820243](https://bugzilla.redhat.com/show_bug.cgi?id=1820243): nodeca daemon should tolerate all taints [#538](https://github.com/openshift/cluster-image-registry-operator/pull/538)
* [Bug 1825718](https://bugzilla.redhat.com/show_bug.cgi?id=1825718): update object dumper [#534](https://github.com/openshift/cluster-image-registry-operator/pull/534)
* [Bug 1808433](https://bugzilla.redhat.com/show_bug.cgi?id=1808433): tolerate all NoSchedule taints [#473](https://github.com/openshift/cluster-image-registry-operator/pull/473)
* [Bug 1814765](https://bugzilla.redhat.com/show_bug.cgi?id=1814765): use junit_*.xml pattern for junit reports [#498](https://github.com/openshift/cluster-image-registry-operator/pull/498)
* [Bug 1815125](https://bugzilla.redhat.com/show_bug.cgi?id=1815125): force path style for custom endpoints [#501](https://github.com/openshift/cluster-image-registry-operator/pull/501)
* [Bug 1808505](https://bugzilla.redhat.com/show_bug.cgi?id=1808505): only process install config changes to configmaps in the… [#477](https://github.com/openshift/cluster-image-registry-operator/pull/477)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/157135b0ab267563688f3638a00b0c6a22080712...2f08889ca73fd78cc8432ec8a03762a92b8ef011)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/1224485d03c5b146126f41a11711c4d35d00f476)

* [Bug 1820543](https://bugzilla.redhat.com/show_bug.cgi?id=1820543): certrotationcontroller: fix typo calling wrong internal LB func [#813](https://github.com/openshift/cluster-kube-apiserver-operator/pull/813)
* [release 4-2] Bug 1810185: Components using globs in Dockerfile COPY commands may break on OCP 4 [#824](https://github.com/openshift/cluster-kube-apiserver-operator/pull/824)
* [Bug 1803750](https://bugzilla.redhat.com/show_bug.cgi?id=1803750): [release-4.2] Improve node controller condition message [#766](https://github.com/openshift/cluster-kube-apiserver-operator/pull/766)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/9741cf15610065b20a1d8322e425e400380f8cbf...1224485d03c5b146126f41a11711c4d35d00f476)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/be2c8227b8c58b162f1749409546f97ac2910d28)

* [Bug 1770303](https://bugzilla.redhat.com/show_bug.cgi?id=1770303): alert when number of expected pods is equal or lower than desired healthy pods in a PDB [#306](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/306)
* [Bug 1810185](https://bugzilla.redhat.com/show_bug.cgi?id=1810185): Remove wildcard COPY form Dockerfile [#372](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/372)
* [Bug 1802297](https://bugzilla.redhat.com/show_bug.cgi?id=1802297): Inject kube-controller-manager pods trust stores with trusted ca bundle [#350](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/350)
* [Bug 1803750](https://bugzilla.redhat.com/show_bug.cgi?id=1803750): [release-4.2] Improve node controller condition message [#348](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/348)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/2945bac21270ed830449f0652fe6b260d13c78a0...be2c8227b8c58b162f1749409546f97ac2910d28)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/3e1ab1a5909f94a1ef971a191802ecc053ce6b36)

* [Bug 1810185](https://bugzilla.redhat.com/show_bug.cgi?id=1810185): Fix dockerfile [#221](https://github.com/openshift/cluster-kube-scheduler-operator/pull/221)
* [Bug 1803744](https://bugzilla.redhat.com/show_bug.cgi?id=1803744): [release-4.2] Improve node controller condition message [#209](https://github.com/openshift/cluster-kube-scheduler-operator/pull/209)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/0e468a3b217714c74a16b76935d69d22abd32ed9...3e1ab1a5909f94a1ef971a191802ecc053ce6b36)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/add5655ff38248a0c18492b8a0e7de92f70213b9)

* [Bug 1803957](https://bugzilla.redhat.com/show_bug.cgi?id=1803957): Specify grafana-proxy container by name [#719](https://github.com/openshift/cluster-monitoring-operator/pull/719)
* [Bug 1791211](https://bugzilla.redhat.com/show_bug.cgi?id=1791211): Add alert for no routes configured in alertmanager [#614](https://github.com/openshift/cluster-monitoring-operator/pull/614)
* [Bug 1803957](https://bugzilla.redhat.com/show_bug.cgi?id=1803957): Backport trusted ca support for prometheus [#683](https://github.com/openshift/cluster-monitoring-operator/pull/683)
* [Bug 1796040](https://bugzilla.redhat.com/show_bug.cgi?id=1796040): pkg/manifests: change location of trustedCA bundle; add trustedCA to … [#658](https://github.com/openshift/cluster-monitoring-operator/pull/658)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/b57610ea1416eb9d2525491de0c0913cd1dbce9b...add5655ff38248a0c18492b8a0e7de92f70213b9)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/6d9c42b2f2d18932036a4d34b0ce14f192a80584)

* [Bug 1785728](https://bugzilla.redhat.com/show_bug.cgi?id=1785728): openshift-sdn, CNO: handle new kubeconfig path [#431](https://github.com/openshift/cluster-network-operator/pull/431)
* [Bug 1778314](https://bugzilla.redhat.com/show_bug.cgi?id=1778314): False Alarm - SDN pod has gone too long without syncing iptables rule [#416](https://github.com/openshift/cluster-network-operator/pull/416)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/2d0b020986d755509705e0df09390711c8c7d609...6d9c42b2f2d18932036a4d34b0ce14f192a80584)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/f135787cf9cd2e23a27f7a55ff98d40f486d66a5)

* [Bug 1795671](https://bugzilla.redhat.com/show_bug.cgi?id=1795671): Do not set owner references on tuned ServiceAccount (4.2) [#109](https://github.com/openshift/cluster-node-tuning-operator/pull/109)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/8b942ac6bf3efdb9b62ae8b03847b6a71d769ede...f135787cf9cd2e23a27f7a55ff98d40f486d66a5)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/37968e2ae5136b02fc5376bcc321c8b4ba84029e)

* [Bug 1805615](https://bugzilla.redhat.com/show_bug.cgi?id=1805615): no longer gate removed processing when imagestreams in progress [#234](https://github.com/openshift/cluster-samples-operator/pull/234)
* [Bug 1805250](https://bugzilla.redhat.com/show_bug.cgi?id=1805250): manifests: add openshift/oauth-proxy:v4.4 image [#248](https://github.com/openshift/cluster-samples-operator/pull/248)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/12e7540dea0bc001948af9e7a0028f9da398303e...37968e2ae5136b02fc5376bcc321c8b4ba84029e)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/4b39863ed739013e58fa9ca22fa6c945ec6c2f51)

* [Bug 1800346](https://bugzilla.redhat.com/show_bug.cgi?id=1800346): lib/resourcemerge/core: Fix panic on container removal [#314](https://github.com/openshift/cluster-version-operator/pull/314)
* [Bug 1792005](https://bugzilla.redhat.com/show_bug.cgi?id=1792005): lib/resourcemerge/core: Clear livenessProbe and readinessProbe if nil in required [#300](https://github.com/openshift/cluster-version-operator/pull/300)
* [Bug 1802248](https://bugzilla.redhat.com/show_bug.cgi?id=1802248): lib/resourcemerge: remove ports which are no longer required [#325](https://github.com/openshift/cluster-version-operator/pull/325)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/9f4f04e736a0bbc61323593fbb62874570f07762...4b39863ed739013e58fa9ca22fa6c945ec6c2f51)


### [console](https://github.com/openshift/console/tree/3b1ae8627c22b6bcc8e29e5810179075116f0a10)

* [Bug 1807294](https://bugzilla.redhat.com/show_bug.cgi?id=1807294): Fix sort criteria for capacity for storage tables [#4688](https://github.com/openshift/console/pull/4688)
* [Bug 1798646](https://bugzilla.redhat.com/show_bug.cgi?id=1798646): Backport fix for incorrect channel displayed in OperatorHub [#4379](https://github.com/openshift/console/pull/4379)
* [Bug 1796634](https://bugzilla.redhat.com/show_bug.cgi?id=1796634): Fix bug where booleanSwitch does not default to false [#4142](https://github.com/openshift/console/pull/4142)
* [Bug 1787585](https://bugzilla.redhat.com/show_bug.cgi?id=1787585): Fix off by one bug in metrics rows count [#3859](https://github.com/openshift/console/pull/3859)
* [Bug 1790557](https://bugzilla.redhat.com/show_bug.cgi?id=1790557): Fix Pipeline Params [#3983](https://github.com/openshift/console/pull/3983)
* [Bug 1774843](https://bugzilla.redhat.com/show_bug.cgi?id=1774843): Fix clone build access review [#3683](https://github.com/openshift/console/pull/3683)
* [Full changelog](https://github.com/openshift/console/compare/20e9f08c20117d3bb52b0c41e4307f745d7130c4...3b1ae8627c22b6bcc8e29e5810179075116f0a10)


### [docker-builder](https://github.com/openshift/builder/tree/942630c84b34f4cb6ccae4f1ba08a20dc8546fe6)

* [Bug 1802888](https://bugzilla.redhat.com/show_bug.cgi?id=1802888): bump(*): CVE-2020-8945 [#137](https://github.com/openshift/builder/pull/137)
* [Full changelog](https://github.com/openshift/builder/compare/0f80bf2549fdf0f652c9a42da9539f15d2d26bf5...942630c84b34f4cb6ccae4f1ba08a20dc8546fe6)


### [haproxy-router](https://github.com/openshift/router/tree/9d1233b4a7c230969f0f7e1679caedcc2ba64dee)

* [Bug 1809398](https://bugzilla.redhat.com/show_bug.cgi?id=1809398): Dynamically reload metrics certificate/key file changes [#96](https://github.com/openshift/router/pull/96)
* [Full changelog](https://github.com/openshift/router/compare/9072754a0a4c311b0e5ac8a9707e692a9b4f7156...9d1233b4a7c230969f0f7e1679caedcc2ba64dee)


### [hyperkube, tests](https://github.com/openshift/origin/tree/20b13ba3d745c2c0060be4fbf485311c6d8c672c)

* [Bug 1794854](https://bugzilla.redhat.com/show_bug.cgi?id=1794854): UPSTREAM: 86195: Sync the status of static Pods [#24454](https://github.com/openshift/origin/pull/24454)
* [Bug 1803083](https://bugzilla.redhat.com/show_bug.cgi?id=1803083): 4.2: UPSTREAM: 87673: blank out value for unbounded client label [#24543](https://github.com/openshift/origin/pull/24543)
* [Bug 1817619](https://bugzilla.redhat.com/show_bug.cgi?id=1817619): make s2i-dropcaps more reliable by not depending on a yum install to [#24785](https://github.com/openshift/origin/pull/24785)
* [Bug 1791855](https://bugzilla.redhat.com/show_bug.cgi?id=1791855): backport e2e testing oauth-server fixes [#24747](https://github.com/openshift/origin/pull/24747)
* [Bug 1791211](https://bugzilla.redhat.com/show_bug.cgi?id=1791211): test/extended/prometheus: exclude AlertmanagerReceiversNotConfigured from checking [#24638](https://github.com/openshift/origin/pull/24638)
* [Bug 1794830](https://bugzilla.redhat.com/show_bug.cgi?id=1794830): move more image-eco db template tests from upstream repos to samples operator [#24511](https://github.com/openshift/origin/pull/24511)
* [Bug 1800894](https://bugzilla.redhat.com/show_bug.cgi?id=1800894): test/cmd: build.sh can't reach old openshift/origin:v1.1 [#24521](https://github.com/openshift/origin/pull/24521)
* [Bug 1765249](https://bugzilla.redhat.com/show_bug.cgi?id=1765249): CL fix fixture path & update config path, quickstarts & bindata [#24127](https://github.com/openshift/origin/pull/24127)
* [Bug 1794813](https://bugzilla.redhat.com/show_bug.cgi?id=1794813): UPSTREAM: 79160: e2e Flake: Pass updated deployment for comparison of replica count [#24474](https://github.com/openshift/origin/pull/24474)
* [Bug 1794830](https://bugzilla.redhat.com/show_bug.cgi?id=1794830): pin image-eco sclorg samples usage to specific versions to shield from upstream development changes [#24457](https://github.com/openshift/origin/pull/24457)
* [Full changelog](https://github.com/openshift/origin/compare/c383847f67bc08756c85a40b1bbeaef5a6fc77ac...20b13ba3d745c2c0060be4fbf485311c6d8c672c)


### [insights-operator](https://github.com/openshift/insights-operator/tree/39dbbca170d2b1baa5919fa8c5b9158b9ad7dd39)

* [Bug 1798889](https://bugzilla.redhat.com/show_bug.cgi?id=1798889): initial commit for tests for release 4.2 [#57](https://github.com/openshift/insights-operator/pull/57)
* [Bug 1788116](https://bugzilla.redhat.com/show_bug.cgi?id=1788116): override node selector (4.2) [#64](https://github.com/openshift/insights-operator/pull/64)
* Backport code owners to 4.2 [#75](https://github.com/openshift/insights-operator/pull/75)
* [Full changelog](https://github.com/openshift/insights-operator/compare/03f4b60ee831e4979e066e0f24fcf0206f34d775...39dbbca170d2b1baa5919fa8c5b9158b9ad7dd39)


### [jenkins, jenkins-agent-maven, jenkins-agent-nodejs](https://github.com/openshift/jenkins/tree/b1276b03231e5c93cb4acc1a99b4e70048ca6271)

* [Bug 1810389](https://bugzilla.redhat.com/show_bug.cgi?id=1810389): Bump login plugin to 1.0.23 [#1031](https://github.com/openshift/jenkins/pull/1031)
* [Bug 1793321](https://bugzilla.redhat.com/show_bug.cgi?id=1793321): [4.2] Remove use of /etc/passwd and upgrade plugins versions [#1022](https://github.com/openshift/jenkins/pull/1022)
* [Full changelog](https://github.com/openshift/jenkins/compare/b20142f5afc5092548e667cefa81047e73538868...b1276b03231e5c93cb4acc1a99b4e70048ca6271)


### [kube-client-agent, kube-etcd-signer-server](https://github.com/openshift/kubecsr/tree/cc0d71d58118b4c65fe3fa2b4f2e4747c5774668)

* [Bug 1769992](https://bugzilla.redhat.com/show_bug.cgi?id=1769992): pkg/certsigner/signer: Add "client" usage to server profile [#17](https://github.com/openshift/kubecsr/pull/17)
* [Full changelog](https://github.com/openshift/kubecsr/compare/227189dae8e64eca5ad13a8bb96df8d8d5502f35...cc0d71d58118b4c65fe3fa2b4f2e4747c5774668)


### [kube-proxy, node, sdn-controller](https://github.com/openshift/sdn/tree/88af32d0d59282f9a1160b61e0f73a6695aa9c9e)

* [Bug 1816389](https://bugzilla.redhat.com/show_bug.cgi?id=1816389): handle pod updates correctly in networkpolicy [#130](https://github.com/openshift/sdn/pull/130)
* [Bug 1797043](https://bugzilla.redhat.com/show_bug.cgi?id=1797043): [4.2] Clean up stale egress IP iptables rules on startup [#101](https://github.com/openshift/sdn/pull/101)
* [Bug 1806648](https://bugzilla.redhat.com/show_bug.cgi?id=1806648): Fix pod startup reattach/kill loop [#110](https://github.com/openshift/sdn/pull/110)
* [Bug 1793952](https://bugzilla.redhat.com/show_bug.cgi?id=1793952): [4.2] Fix reinitialization of deny-all NetworkPolicy state on restart [#105](https://github.com/openshift/sdn/pull/105)
* [Bug 1794029](https://bugzilla.redhat.com/show_bug.cgi?id=1794029): [4.2] Use k8s.io/client-go fork with informer fix, run update-deps [#95](https://github.com/openshift/sdn/pull/95)
* [Bug 1772592](https://bugzilla.redhat.com/show_bug.cgi?id=1772592): Make DNS querying more efficient by querying once per dns name [#72](https://github.com/openshift/sdn/pull/72)
* [Bug 1790704](https://bugzilla.redhat.com/show_bug.cgi?id=1790704): proxy: add handler with same ResyncPeriod as shared informer. [#90](https://github.com/openshift/sdn/pull/90)
* [Full changelog](https://github.com/openshift/sdn/compare/770cb7bf922a721bc6c62af5490439d6174036fe...88af32d0d59282f9a1160b61e0f73a6695aa9c9e)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/b3a05b2e61aad309577740140e84532375bec037)

* [Bug 1785219](https://bugzilla.redhat.com/show_bug.cgi?id=1785219): [release-4.2] Discard audit messages from journald [#1350](https://github.com/openshift/machine-config-operator/pull/1350)
* [Bug 1797790](https://bugzilla.redhat.com/show_bug.cgi?id=1797790): [release-4.2] prevent hitting annotation max size limit on nodes (cherry-pick) [#1432](https://github.com/openshift/machine-config-operator/pull/1432)
* [Bug 1797038](https://bugzilla.redhat.com/show_bug.cgi?id=1797038): Get etcdctl binary from the etcd image and not from the upstream releases [#1464](https://github.com/openshift/machine-config-operator/pull/1464)
* [Bug 1795561](https://bugzilla.redhat.com/show_bug.cgi?id=1795561): machineconfig.crd.yaml: add passwd schema [#1435](https://github.com/openshift/machine-config-operator/pull/1435)
* [Bug 1781665](https://bugzilla.redhat.com/show_bug.cgi?id=1781665): pkg/daemon: randomize pivot container name [#1347](https://github.com/openshift/machine-config-operator/pull/1347)
* [Bug 1789248](https://bugzilla.redhat.com/show_bug.cgi?id=1789248): cleanup sdn ips on reboot [#1362](https://github.com/openshift/machine-config-operator/pull/1362)
* [Bug 1782152](https://bugzilla.redhat.com/show_bug.cgi?id=1782152): templates/container-storage: Add a "this is generated" note [#1323](https://github.com/openshift/machine-config-operator/pull/1323)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/31fed93186c9f84708f5cdfd0227ffe4f79b31cd...b3a05b2e61aad309577740140e84532375bec037)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/f703423f84b93606ab27620aa6f1117d4758f701)

* [Bug 1809258](https://bugzilla.redhat.com/show_bug.cgi?id=1809258): Reload serving certs [#164](https://github.com/openshift/oauth-proxy/pull/164)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/2eb032f852533561e82af7d3792a996d8071ca6c...f703423f84b93606ab27620aa6f1117d4758f701)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/5bfde78e8d058caaaf15a143316d924a4bdbdf78)

* [Bug 1803084](https://bugzilla.redhat.com/show_bug.cgi?id=1803084): 4.2: UPSTREAM: 87673: blank out value for unbounded client label [#76](https://github.com/openshift/openshift-apiserver/pull/76)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/55d971b2b5aa43b2ae45fed148cf73c149ca79a7...5bfde78e8d058caaaf15a143316d924a4bdbdf78)


### [operator-lifecycle-manager](https://github.com/operator-framework/operator-lifecycle-manager/tree/4f7a7cce5c7ab50c8ea6b38f0af26c4dc9bbb97b)

* [Bug 1808422](https://bugzilla.redhat.com/show_bug.cgi?id=1808422): Don't block on ctx.Done() if startup fails [#1422](https://github.com/operator-framework/operator-lifecycle-manager/pull/1422)
* [Bug 1798666](https://bugzilla.redhat.com/show_bug.cgi?id=1798666): Fix cases where an operator's ready channel may never close. [#1281](https://github.com/operator-framework/operator-lifecycle-manager/pull/1281)
* [Bug 1805575](https://bugzilla.redhat.com/show_bug.cgi?id=1805575): Remove run-level 1 from olm and openshift-operators namespaces [#1309](https://github.com/operator-framework/operator-lifecycle-manager/pull/1309)
* [Bug 1805269](https://bugzilla.redhat.com/show_bug.cgi?id=1805269): Fix configmap registry server readiness probe timeouts [#1378](https://github.com/operator-framework/operator-lifecycle-manager/pull/1378)
* [Bug 1809661](https://bugzilla.redhat.com/show_bug.cgi?id=1809661): Update subscription_sync_count to include the package name [#1367](https://github.com/operator-framework/operator-lifecycle-manager/pull/1367)
* [Bug 1803148](https://bugzilla.redhat.com/show_bug.cgi?id=1803148): fix(packagemanifests): Fix index key func to avoid key collision [#1357](https://github.com/operator-framework/operator-lifecycle-manager/pull/1357)
* [Bug 1797021](https://bugzilla.redhat.com/show_bug.cgi?id=1797021): Fix bad opgroup annotations [#1373](https://github.com/operator-framework/operator-lifecycle-manager/pull/1373)
* [Bug 1796914](https://bugzilla.redhat.com/show_bug.cgi?id=1796914): packageserver update fails to adopt APIService [#1271](https://github.com/operator-framework/operator-lifecycle-manager/pull/1271)
* [Bug 1774752](https://bugzilla.redhat.com/show_bug.cgi?id=1774752): schedule catalogsource pods to linux nodes only [#1145](https://github.com/operator-framework/operator-lifecycle-manager/pull/1145)
* [Bug 1769561](https://bugzilla.redhat.com/show_bug.cgi?id=1769561): Replacing operator creates duplicate secrets [#1159](https://github.com/operator-framework/operator-lifecycle-manager/pull/1159)
* [Bug 1787597](https://bugzilla.redhat.com/show_bug.cgi?id=1787597): fix(packageserver): cache packagemanifests [#1240](https://github.com/operator-framework/operator-lifecycle-manager/pull/1240)
* [Full changelog](https://github.com/operator-framework/operator-lifecycle-manager/compare/e77d11535ab96c39a00ec5f732f26b8dd5023281...4f7a7cce5c7ab50c8ea6b38f0af26c4dc9bbb97b)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/4a3f862f017c052290c0710a808c618ba3af58d0)

* [Bug 1814012](https://bugzilla.redhat.com/show_bug.cgi?id=1814012): support serving marketplace prometheus metrics over https [#297](https://github.com/operator-framework/operator-marketplace/pull/297)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/2cc8e419ca45e2e15183227338a5010a1462166f...4a3f862f017c052290c0710a808c618ba3af58d0)


### [prometheus-config-reloader, prometheus-operator](https://github.com/openshift/prometheus-operator/tree/9ead628b3c468174a31c93bf74ad158637727706)

* [Bug 1763098](https://bugzilla.redhat.com/show_bug.cgi?id=1763098): *: Ensure containers have "FallbackToLogsOnError" termination policy [#41](https://github.com/openshift/prometheus-operator/pull/41)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/38109e45e3a6de5243de6ec45067402b67726c95...9ead628b3c468174a31c93bf74ad158637727706)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/c8633ae9973bf7a6cb61dd00cb5558325cade8ac)

* [Bug 1789085](https://bugzilla.redhat.com/show_bug.cgi?id=1789085): Not reporting 'none' when no platforms located [#50](https://github.com/openshift/node_exporter/pull/50)
* [Full changelog](https://github.com/openshift/node_exporter/compare/5f4e5c23ec8d5e8a4446eda078c14ae154ffa0b6...c8633ae9973bf7a6cb61dd00cb5558325cade8ac)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/9947ab9d0d750b0a42b08527adbca81018d477c7)

* [Bug 1810421](https://bugzilla.redhat.com/show_bug.cgi?id=1810421): Ensure service CA certs are created with unique serial numbers [#113](https://github.com/openshift/service-ca-operator/pull/113)
* [Bug 1774156](https://bugzilla.redhat.com/show_bug.cgi?id=1774156): 4.2 cherry-picks in support of automated service ca rotation [#105](https://github.com/openshift/service-ca-operator/pull/105)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/f6720573b9b63147436374e51e6fda44683b1e9f...9947ab9d0d750b0a42b08527adbca81018d477c7)